<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2596">
<package pkgid="443b84b0db3fb1e742ebd2e2d22a0576ede528a893593af5ef4147223cb74ba7" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="4330333b5032df8908c15692bea5a33d714ffb389ac8d7145919752785084255" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="f3ece1d2921fc6c75ebe99c2f77a66505d5e0eb0464b1e59e3ec04249ef0552b" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="15e88cf2054eb29e9f7c8c7878f1a6481c0fffc307fb1574b5e65adf862ef015" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="4f71f6bd13d9dd950c2bbdf3f9a99b152fa7da975663df86927e6bd43da4b8c7" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="87895854e8c250e0d72212a52f3291fe1a678a853112243589c2c679ef4218b3" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="1b990e9a083c8adce6b64d6c996b54fd17b14f3655f1f22a42ee4e67b18f8205" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="49b5dc5c1cd42ddbea08393ac24c450f67ad8cc1b6c0a43a187fd69acd7bbe6d" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="7df4bfd5b2f974237bb07426fd3a576003d1880858c4356ab6f8d6c40bc69504" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="d0031702c649f199ed91f9b08b5993c024013252f6153379d117e87c045b4426" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="993b87d7466ccaf6ff7c928f4c55d5e4788e7f0a01bb0526ff123674b62b6e32" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="f90bab27364ef195f3edfc2701c9265205047334e32113cc59d05e635f00d689" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="66eba3c460cd7f3776dd27071f65339e811c8fa54b43e44419ea19b1c6a1ee33" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="4cd550f8ccd3bfba4e56faca374976947a8f3732ad531413535a0abf6cac6ccb" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="971e9399ce931e63586097370755a28bffd4b531b42e22ac8d54fc2a85242056" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="8d33b47d0082204114845419dda5c3acc03c92d8a39dbb2a7bcb251e50d8327d" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="fce3e0ff7d3756930b62b02caea072dca57b7febb14883962e1ba072fe82452d" name="389-ds-base" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="e7cfe4c99db698593c62b84f0069b0740c40da89fcb59232a5c09cb67654752a" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="33c3bea4f238c867cc157c6c2569d37bb1579bc6fb61dee324ba7a572ed73ca9" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="d6990a492c67810a08e03c7c5ebf8ccef87710fec3708164259a2c72e1eae6f4" name="389-ds-base" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="add7a14aa14af276595808032618edf3747d7c1302b44808a10489242a380720" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="cfd5063189a07ec209d3cc8c49217e607faeb1988b9c09ac0c4a3dde831b8dd3" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="ca818375fcce6b7bfe54b352d71a0c4ad3951906890fb485726e9d0a01aa0f1e" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="bde28af8a16429d898ccda9e3a656b4a1a1658a4e785efac4c20aed3cf073470" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="f519eec850955e1cb5bd9db02518299f605608055891cce707deda6ac6dbbf01" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="9d66931ead8bf4abfbbfaa1b4e361a9b350fdc1dca970ae02c0901e887f9c739" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="b0f9f4ab1aa03f4832c5042f02190abbbd6acd7ea7030c0cbf8739895e19941d" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="f07a61591654ab7dd52e6b7849db4acf22c6cc8ac33518f3058218f38a834b0d" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="fcd93da0a507f9d97f1512037d4c76f24415cc950098d590a0bceb08e9f7c7b8" name="389-ds-base-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="0379110e8b74158eff7859f4f8dd6d9ed3e7804bae79c706f753ac63227db175" name="389-ds-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="cbe696448df478f0c54c246482beab1a30f82eb9b6b4b6718c36d151a239010e" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="d2afab0f0f65f819c4db044f99c10a5dbfed7e359d72164543edf97c62266c4a" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="4985658533ee4eebe621625f44f9b3dda7887876ec9ef3cd8f665aa6de2e6e79" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="cb807311bc86947468eee25de0035ad4606dcc2ebadad13d7d4e39c0641c398c" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="355635f427d5234634e0274ca42b0b3d57c237a0f8ad8fc5194c50f3b7416ac6" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="e6ee5fc7a18665e60699e74ca3877b3705569a78d2639d06eeec40a1c10b9eb1" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="a2630e3803d67f3b82d19910eabe5bbf43825cd4be6991cc53cbb27481718d5f" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="788277b77ad232d3122787144247de26125d97456310fcc5c8a2f8f33ca13f33" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="eae5c9aa4ea4399666f8c4712a411e06c4f5071d333e17c2f04a5575c18c040a" name="389-ds-base-devel" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="94f060acab6b687f8f9c5eaf55574fc271d57ccb5b52e8d0a2fa092421313565" name="389-ds-base-devel" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="528c4efdd1763f2d496309da8abd1274201b06303c109968bdf80d7acece82fc" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="53d33283147259770ad4aa382bb852b78a7029a90ff9008ad9280df7ead7d1f4" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="fad8c9aa4d27043c521613a9d9300a844d23e9033646ab4d708bbb85f3314fcd" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="051e98c9c90c267d99df2f077834a5f9eafc0f421f5070a9fde55feaa09a536f" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="94c4228122f89d6d58bf94684e9dda4c69dc55598c9e5e8afc4cfdcce557ac20" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="0fab3ec8cee3e856b4e5dd74cb3efb7003e72f4492ac191cb6e91090be79fd64" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="e6272dd03ef38b70919a657a8cd6e6a688b2a1699744daae15e8fb9889f80612" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="3b54c014fbc3d3cd8d5ca791819080363cdcbbb8e775522c03148f1055c9c3a6" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="da7623bf69df946f8d62c541fa5e9e76321f99a2924685c7355f1feb7a9dc9fc" name="389-ds-base-libs" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="f72606ffd4e4224e3bd6640813653f9d30e0b13dae8fd3bd9c33ee2271bd8d02" name="389-ds-base-libs" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="fa229ae62b251b7fdbb34b8bd03c82f802fa9b8c53cfab4867e9efd85b91d1d3" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="21a0e80eed8dd696a35a68ca98d246069fc418cf70d4441f6c5d7f40c4cdaf3f" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="3f4bf4a00f0b0b08ac7c6a908a99174f05131a0794b740c70accd0818315e774" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="7fbfee08300262f93e2011fd8c397620ee5d752355d73455637437f50b87f1e7" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="6605c6405f3bdebcbe18709d415b7339e7c67c349183846fe7a6c30894e2a5d3" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="f16a1efb7a0df3b488238eb66257d8004d5e3ae063188a1e1d3bb9db66246f5a" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="54ce08c54dbd7bfe336c84c7af91727d367f2f3768b4c2f08c64cd57ecb014ed" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="61c65cfb62edbdfe762eb6b3b4a88ea2ed5e6c0820d00d83b78607821409b3ab" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="156b42df2cda40c2e91fe11cc1b32546954eaee3efa69535c76a4fba475dd5c1" name="389-ds-base-snmp" arch="i686">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="642e79b8e9bfb0e64dd5ac5f43582e2849d935586654c7f98e3bba984de52d34" name="389-ds-base-snmp" arch="x86_64">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="386dd88b5196e27533f985f340283b58e97f8a70a1d45105f44f084077387fb7" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="8927ae7e2a5150c274ad61b29edb2849373d79b96329c165dc962389a203f72c" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="277fda39c2235370e31668eab606a80025b631af80d09d4b2557e2c76a408e07" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="da46a40858d4cc35d9906ca29a6503a70dd282c4b6ccb54c88e36837a6ecf0d2" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="19.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-10" date="1510833600">- Bump version to 1.3.7.5-10
- Resolves: Bug 1464463 - Replication fails to start with CBCA (Certificate-Based Client Authentication) while FIPS mode is enabled.
- Resolves: Bug 1465383 - Segmentation fault in valueset_array_to_sorted_quick
- Resolves: Bug 1510865 - python-ldap is not a dependency of 389-ds-base
- Resolves: Bug 1513467 - IPA upgrade fails for latest ipa package
- Resolves: Bug 1192099 - IPA server replication broken, after DS stop-start, due to changelog reset
- Resolves: Bug 1445188 - Misleading error message - Incoming BER Element was 3 bytes 
- Resolves: Bug 1498980 - heap corruption during import
- Resolves: Bug 1511462 - scope one searches give incorrect results
- Resolves: Bug 1514033 - opened connection are hanging, no longer poll</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-11" date="1512734400">- Bump version to 1.3.7.5-11
- Resolves: Bug 1518069 - heap-buffer-overflow in ss_unescape
- Resolves: Bug 1516676 - gssapi authentication fails after upgrading 389-ds-base
- Resolves: Bug 1511885 - Automatically load /usr/lib/sysctl.d/70-dirsrv.conf after installing 389-ds-base
- Resolves: Bug 1517980 - stack-buffer-overflow in slapi_pblock_get</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
</package>
<package pkgid="ef9584a4265547bcb41e0d4b0c0ff029d5eaa5cdea2d6e297dab0c23788d43ac" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="2344cf0f9b7b656accf0d78d0440c077b8c47b54a50dfe6afd027ebefbaffd45" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="775766524a34bb600c575756581ef0983663fcd5a4aacb164d28144ff39b6a51" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="f182fd0b0f336c4e1b38fb9f700c406dba172a05c2c42e3db26b579127a8a68f" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="d7ddb7502da80b6ca92582e2407c7312ff4634577acfc9f3164a7b846a7b2020" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="7effb1c9e533d10c919ab4c7b6a610570424a92b40bb4a85d8f4c017b671f62e" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="495baa8e84f7389f193cdf42ecf236013cf12d9576b5ba577c4c384d71c24190" name="NetworkManager" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="cfca1751218497251f314cefa9e24da2857aec6c96a7df915e8c3b3e44c550c3" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="0816ad1065b7145b7690de6acb10312b81fe0dcc57a9644b25f7fca1954e8e4c" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="67aa5c8d97db15487810aff38464d6c1c4fddff9a31454950ae45659fbfa76d1" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="a747496be7483bde0b2027355e6c19c670623ca2cfebe5dc7430e0e66b2ca8b5" name="NetworkManager" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="2391b8b279c08ad58f01453bf008b61d24aa72c04408f9a4e4d6b934bee02b22" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="165facf9b4c1cee2fa6dcc724620e88113398419ffc8e0dda27bdc1ba3611ca7" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="66a0a98eea8aa4a7d427674a63b373a822ad6c8cf3a6ec07e3c529db4b9df807" name="NetworkManager" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="38a2ec91f64fe81f03f32a8b66c68f4c5bd07fcab101f906907dca6eca9dd776" name="NetworkManager-adsl" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="b90aa8454c10a11b501cff1abc511bbc36d38564c2177038406fdda35cd30d14" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="04979e2eb97d2c73e075e95f1095cb110c02ff3dcadce08fff57cfaa9f71b01c" name="NetworkManager-adsl" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="7f8339f1d2c209483f51245c4645955338d8baa6f1043adcb78cfe3521ffdde8" name="NetworkManager-adsl" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="938d3fb6003bacaf464bbc0e0ea4dba13f2a1a49f990e6af01122db33eddbd28" name="NetworkManager-bluetooth" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="9708ecdf3646e510c3190e2181e3525711e2e34182fccec6f58285a14dc0bce2" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="b9ce5636ce39ed7464b7c0877b6c0f570b4e0f6777cbf7ffcfb88212e8fa1f05" name="NetworkManager-bluetooth" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="d04318ce9f76df1c98423bab312a7d38d5df7a96524b7f6389d50e9463de456d" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="00075e2b4bb6f6174d1c802636746a69c7fdfef86173a5fd580ecf0a55783d65" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="1940e85d26aafbdbe7873bcc428ec4b235c655993b9a3f9c16b8fe7931be2cc9" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="78c7db65c3472c60f9534298af1063fc23c48c58a9d1ced8371f1047c1e5e0b3" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="df9bffb0a63f5adc767fc2880c5a9ffdf259146da9a1bdfa77ee23db2ff20599" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="d16cc2da21b0f4f08a25360df591036e35cce12695c78235f280f6eb4e3835f2" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="0fd05bcd948d758657e6aac028a6b027662f64a1a0013ab45f1f763e9cc8c6b2" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="9466727153b6d853da2df707d7d2be602c7547b709fc905ffe110d38002d484c" name="NetworkManager-debuginfo" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="392b817a4c1f72cfb2444467720bd63b048d46b80e8b92e46ab6ecc278db60ed" name="NetworkManager-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="6ac8d32150e1aa7ca34ea444198328b76447b63116f38c3c64f891b2cd8eaef5" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="637eef21306440d2a501cae0cd87d7a2250c67775afad2f8d7ddfea0e08cbc56" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="acb674f6f1f0f67ab9c5dda88a27585ac4f2f1047a2a58200680e130bdd6fb2b" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="a2749924c6b7897ec8e6f88f698c370c673295fd04d6f63930b9554aaeec4f8e" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="19e5ce9aeab089c80631d03024b49e07dbc6d1607390c51780928f13dc3f1af7" name="NetworkManager-glib" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="fddb3550a498f5baa877a5e184048d0d32202b27166589215fbafcb981b992ad" name="NetworkManager-glib" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="6bb49a7cc8076b75c819046fd1eb63fb60c357204548ee257c2477bd8f01963c" name="NetworkManager-glib" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="5048e6ae87a5d97ccd0f14fe4667059bc82688534b11b201f8ed751748e15b81" name="NetworkManager-glib" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="72713a114e9c9a222260401b6391a50700c6198b62e95204d497c911afc4d54e" name="NetworkManager-glib-devel" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="c31b08208f8f3b0076e47c811c19107768adf8eb36b8afed0404bd3f5939f11d" name="NetworkManager-glib-devel" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="82f7640c5aa4f845615245da295bdfe3cacb2cfc94cfabaf10cd85fecfa9da6e" name="NetworkManager-glib-devel" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="9a2c72b2d30862598490799730960756c6c884c25b587647fc70c9da6cbfc06e" name="NetworkManager-glib-devel" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="7a9584c46720ca7e848a6240d8f01411047b2b656803ffa00aed8952cb4528df" name="NetworkManager-libnm" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="b9904fce0dd0a69da16781a1aa57bf3dd580511f1949384561db2b93169a6edd" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="8dad7403be585a1d90d5ad327047c5950718e3ac6b8f6a7c47da7a1cbabdd0b4" name="NetworkManager-libnm" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="2a120b77bd0b58f0e1a930c805a9e8436dd0e6496db3a08fde4ec30cb866a25a" name="NetworkManager-libnm" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="f8e89b5574c73e5cc05f5da6b3f1235f2b6cf7d2ca6fae5f8f1555a52bd27636" name="NetworkManager-libnm-devel" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="2b2cddc4f1311f91c504a82ef34cad0c9657ca94e4e77f37427c4f0d4deb8485" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="893bd92fd0d7ec7bed782a123b8894f08df4ef5fc433210ff34c8275cdbd0a59" name="NetworkManager-libnm-devel" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="8ea313e23c622a651f50075c03c07dd63507ed2e5eb57a61b6660e47790d65bc" name="NetworkManager-libnm-devel" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="943d32b55e06c0e5602e625d361e17e331fdc68fb21f7a68b2b64ea89121b3f5" name="NetworkManager-ovs" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="efd09b97353bb8895a5b6caadd88b708d6dfe00924cf34236c270f382cedee9a" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="c29d87cdb46131b795c639f6ba91d368befca640ef4c3b2dbd1c817d4a59409b" name="NetworkManager-ovs" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="9f904fb8d274b1d36207905a8f36e17042b3938a9d64d54daae279fc60045619" name="NetworkManager-ovs" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="84c31402327d009c2e4287f35308554468f233067846b2871be0095e815d77d1" name="NetworkManager-ppp" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="356fd811b72619edff0d2306d5549125a0ae2f1e849c1e79b26a857f01869b00" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="9630ffbdeb6a82d2beb3626a486d0d363ba82ab2760caf6485cb35661af5a42f" name="NetworkManager-ppp" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="94c0f6e93a33d37ebd0ece31059f46429ac5f30fab54e48dc2cb00e44d842d84" name="NetworkManager-ppp" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="ae503e4a86c4e1579343661031ae49b9d81a1138b7153f6077ad523c532dce16" name="NetworkManager-team" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="1f878af4bfe15811d0dd969e11497c160da0eb53aad52da27c1e3fcf2400f09b" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="1e2e0d9e15eb0a656aef4361ed2af6887ef270c7b2fffcd20357bbec653d2015" name="NetworkManager-team" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="a9cb1e9fbf8f43e3fa266f7b20951a844610f1061b7e314185961518a9353658" name="NetworkManager-team" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="5132778b8defae603f399e917143395b71a03f227caf72bd84f8f21ec96de6e6" name="NetworkManager-tui" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="bd997e6d191aa57f89a9fea5fff1d299eaf97296b2bcba06886cfc71f2533499" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="8fdf5e110bdb55edd25208d5add726d56487e8c8286df01d94d017d33b7b67a4" name="NetworkManager-tui" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="b5008360dbe2d0fdc2214f7e82ee04718a6d401edf9cc60b4a6bf48ccd98048b" name="NetworkManager-tui" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="8d72266e80e35c37aa785a88acd529cb17b430dcb5b99e90a50b8e989e5f5b40" name="NetworkManager-wifi" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="c99336d88177ca8e17bc84c6bb17deb599dfa380d631a6e4e237b410410bc53b" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="a6b5c7f960757cb859afaea589645c0c85b5bbe3e76d1e14ddfb5a8b38f0f195" name="NetworkManager-wifi" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="a319c7062b4e51b7bcf9a7db7e76fe4f353395b0c62db5e8f39a1f911cf6fc35" name="NetworkManager-wifi" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="43661c1a97941ad770d4ad337b42306d5ee82e008750e450d9c1e88060530e84" name="NetworkManager-wwan" arch="i686">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="9bb534c856666e604d8f52e49435db94921cb2da3750ca16695a8b16b4f9cfb5" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="f5a24988be66afe5ddf2a86309fd887b212e374d2e81d4d679a8e07f2db87cf6" name="NetworkManager-wwan" arch="i686">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="93e731d15ac11a634ea1352e7d087318c378e5301fadd145746521a88200f870" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="994f9c9fa173064f56db03d7738676353baa7f278be6f5b67206794d04a0cd2e" name="PackageKit" arch="i686">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="a9fe016de5366b99f7d1a79cadc96115ee46eaa0f735d1d30111187dfc940466" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="5266891be3b78b4d1a380456bcdcaaf55810cb27dfb917f2acd74e9aacb3207f" name="PackageKit" arch="src">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="f606fe2d2e33cc6847731e4290a012a799a78d24552e5d51b075c2880667e939" name="PackageKit" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="fc3d6fbf6f8243d853c4f70a3e14187aea1b479da21defe784252d551554ff9d" name="PackageKit-command-not-found" arch="i686">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="3b7f7a2be30754936dbc3052a4f7ed7e20f6e88478a8188aa6fd4d0301f180ec" name="PackageKit-command-not-found" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="b3a8ed2f83e28aed063a2d082c285915c26cbd1c359c2efa574d742d6bbb6544" name="PackageKit-cron" arch="i686">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="d6be422b5cdc8cfa3c0f08af170f443ebe7d34e20cf2e54dfd0728ef8338d5ff" name="PackageKit-cron" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="f60f47a209897465c4358e5e197b8e4e1038c5266836b9b117ed832e07071f1b" name="PackageKit-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="7194d7e711bcd5297fe10cbc02fda3f8a1f40f6839081386581f7369105e1875" name="PackageKit-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="ad81386b8823a70014b1330133ca52322fc668ea0e424daded8ca1c2a093d41c" name="PackageKit-glib" arch="i686">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="0596172245b5eafccd2fb76fedd0ddf94d81eb5ed3a7bb071edfd836c14cc990" name="PackageKit-glib" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="b00d9e71e2ff7cc1045ff04066f20634fd8c2e15004cc3616672807d4ed1ba15" name="PackageKit-glib-devel" arch="i686">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="2232abb645005fac18d3fb73109b40b054149dadac43a389a196b05cb0ae8886" name="PackageKit-glib-devel" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="e3ca0d258c007320c14f1b39471d3c454c2cae48137d244cef054ec0464980e9" name="PackageKit-gstreamer-plugin" arch="i686">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="f11b846a76176da15ab5dbbdc2c952fb8cea9cc4a8bca957992a20be5d4df260" name="PackageKit-gstreamer-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="47175dbdb0c2a500c28af3f860227bbb6a10bab44cc23c93d381d93b95746b15" name="PackageKit-gtk3-module" arch="i686">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="065b825d08079c47387d8f9de5c1e1e9162d9b87496107f1f924b682e28e466a" name="PackageKit-gtk3-module" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="be1426b23d8fb3ec232bff0b40b02cddbd5d366a60a65aa17865a54d6ab76461" name="PackageKit-yum" arch="i686">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="a13eaec331046f53efb1d39430c068083dea70fd5c80bb97cccd5a08c183bdca" name="PackageKit-yum" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="bca35c841d48fff4bd17cccbb93c2c57dd14b1aba1dcaaba934b6e9fd668390d" name="PackageKit-yum-plugin" arch="i686">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="640e841b71928c2a3ffb7f4ce268365eaba7d68f10df836a023e76900be6778a" name="PackageKit-yum-plugin" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="2.el7.centos"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.1.5-2" date="1523966400">- Fixes CVE-2018-1106
- Resolves: rhbz#1566425</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 1.1.5-2.el7.centos" date="1524571200">- remove old branding patch
- Update Vendor patch to reference CentOS</changelog>
</package>
<package pkgid="14e1402d6cecd98bf11dd87816fdb9d1cfbf36d27b32a89a3e50618973f4ffd7" name="adwaita-gtk2-theme" arch="i686">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="50358445455d837b8b7cdb24422c817edd41191cb9462fb3210188665fbcb3b9" name="adwaita-gtk2-theme" arch="x86_64">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="e119a644782ec8009d546f9d3313dac709f615a23e2af0f49a4860cbedc533d6" name="audispd-plugins" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="bbd5314eaa8a3fa3b42d5c847f32c1fcd22c4a79037a67c21243db63ab5f65e8" name="audispd-plugins" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="2b1c13e4f384b995e33ed7ea022714be04732487819af340a8e3b0a42ed1d54f" name="audit" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="c1a6e0ef5c02ea92bb7d0fc92115939d0bc5c491dd1c25413d3d5376d42918d6" name="audit" arch="src">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="928501cc622fad6306065cd0c45dff2dd002cbce0ad31e78d65737be7e6a6201" name="audit" arch="src">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="2c545e59c3c7024d0faabaa177630d9f1564f544d32c3030a4ea972d6d2353f5" name="audit" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="79e8b8523690d0de68b00339374915ba1159010142910175d4075ed7148171e5" name="audit-debuginfo" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="29e8608584c37410a9557fe451408c14c7347fba64edfe8a74a3e214a6d0b3cb" name="audit-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="dcb3f33e047f77f424332cd2865bee231985ed47b0ac0c4a85bbe36fc0ebdc95" name="audit-libs" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="d4e6b259dbe83afd2d55949893b3e58bb30b0eb922a7ad0648d01f1ab617bad8" name="audit-libs" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="44cfabfaba2c4d8ada178d533033406463ba4729e038e9338082d419533798e8" name="audit-libs-devel" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="49ac2a72ec31997adb7b8c8279d125c6dec085ff9de6a41266fb27cc934dd9ab" name="audit-libs-devel" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="8d6fa619625f022fb573eb800e8c5e3d0c0220176b40b1510735fd7adb996586" name="audit-libs-python" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="a8febe8b450ee20ba320e2f5137ae62ebf0e9dcafe4997896cb04163dfc3b341" name="audit-libs-python" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="4a7fce59194113a1e4700e67e14ac23b5756f19a36c3f917fcae4c5c8157c215" name="audit-libs-static" arch="i686">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="97ff43f5d74285e741f34f748ef0fa44c364960744fc6a807095fe8c1568f7e3" name="audit-libs-static" arch="x86_64">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="a3c53a174a9eec7d12f132f6169ef4d446b544d5b1b5ee4c914373600badff77" name="augeas" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="bee2f83c7f5590e6e9523f8988217f7792c016589b516c5c39d60e81c032311f" name="augeas" arch="src">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="7115efc854d072b4feb80f59a60b4447807aae9efbe0db3d8ec063c5f47f14ca" name="augeas" arch="src">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="d5c76fef81be1d9574ae7a2509ae85abb5624ea85a5f753c4ced2bba70b6997d" name="augeas" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="05c0e767d1f9a6ef63acf09dbfba4844792368fe2333d5118c7ae3cbd2ff7f96" name="augeas-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="03663550daa2b9bd73c26ad6df9b12044245ba702eb8c686a1c3a7e19662a5ec" name="augeas-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="f350a79646b4c4f517b855c7212165b4a8006e9b9c34f7c3fa86a322d26443ef" name="augeas-devel" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="3f941e23013be7662e8f0ed43d11475212a8dbb233e14931d6d9396fc9b03109" name="augeas-devel" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="9e71bcc90893c90ea21b9df988187e9a21e946e949eb50caf72601ae75d9a4b5" name="augeas-libs" arch="i686">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="40a6873aadff9585f7db6def7848dcc7d417387556d8cfaaedf03dc35853dcc0" name="augeas-libs" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="fe98f451cd34d9a8422e48e682698297da4cd64a41ba1466f53b7bb10f32778f" name="awscli" arch="noarch">
  <version epoch="0" ver="1.14.28" rel="5.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5.1" date="1527163200">- Fix unsupported max_bandwidth issue

  Resolves: rhbz#1581138</changelog>
</package>
<package pkgid="78526259e42601b4a29f4442185e57d47856ac8882775c9860e6bedf70772785" name="awscli" arch="noarch">
  <version epoch="0" ver="1.14.28" rel="5.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5.1" date="1527163200">- Fix unsupported max_bandwidth issue

  Resolves: rhbz#1581138</changelog>
</package>
<package pkgid="ad8272c087ce499c33852b92fd13c30b811298557f99158553ee1c4b8c00387f" name="awscli" arch="src">
  <version epoch="0" ver="1.14.28" rel="5.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5.1" date="1527163200">- Fix unsupported max_bandwidth issue

  Resolves: rhbz#1581138</changelog>
</package>
<package pkgid="80325cb567665f2924eadde4109b1e1568c1c6471b30a1814297dd4c393d4007" name="awscli" arch="src">
  <version epoch="0" ver="1.14.28" rel="5.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5.1" date="1527163200">- Fix unsupported max_bandwidth issue

  Resolves: rhbz#1581138</changelog>
</package>
<package pkgid="d44a679cbfa1f5a8d0ac83eaf97db5a5ddad10c7d2574671d20c2d4aae83ed00" name="binutils" arch="i686">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="747c5c46fe1f9e477415dfbf626838f4b41633a9af5c6daf301c2b1bf9727573" name="binutils" arch="src">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="7b2538c861ae443162937759c924f9fcc7aacb66e5ac286e3dc47dd03ecf4966" name="binutils" arch="src">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="01dff0571825e350ed5d8ef28e5a1e7116f570b7304661356508b6d5ad8a5dc0" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="4e4815fef200b4b114f7e3dc5dc9efb020a6856c19cdac46e5cf2b0be4344cb1" name="binutils-debuginfo" arch="i686">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="8275cb904609a2f3040d74fe5065c9c7c4e412d181848741e97e2894f45b179e" name="binutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="a73a686666b1b363af505234b6cfc817eecce2ac3de5e44ee7c8d47933375057" name="binutils-devel" arch="i686">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="4c853037b99b6d03b30d0b3297c8793b0dfa23d36fa2bbb7a8df71a47e92de0e" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="41a498567c92f7517c08b88c956776b4e7f20f6fd6f17255e758a09d2daf07d2" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2018.2.22" rel="70.0.el7_5"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2015.2.6-72" date="1461585600">- Fixed a typo in a manual page (rhbz#1303960)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2016.2.6-73" date="1462881600">- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-71" date="1484654400">- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
- Use comments in extracted bundle files.
- Change packaging script to support empty legacy bundles.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-72" date="1489147200">- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
  as a preparation to fix bugs in the interaction between p11-kit-trust and
  Mozilla applications, such as Firefox, Thunderbird etc.
- For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
- Require p11-kit 0.23.5
- Added an utility to help with comparing output of the trust dump command.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-73" date="1489147201">- No longer trust legacy CAs</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
</package>
<package pkgid="15667d3472f98b844e0520f6d2eda8bac7f9f11fab17dd1dada3dc68c9c2f084" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2018.2.22" rel="70.0.el7_5"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2015.2.6-72" date="1461585600">- Fixed a typo in a manual page (rhbz#1303960)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2016.2.6-73" date="1462881600">- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-71" date="1484654400">- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
- Use comments in extracted bundle files.
- Change packaging script to support empty legacy bundles.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-72" date="1489147200">- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
  as a preparation to fix bugs in the interaction between p11-kit-trust and
  Mozilla applications, such as Firefox, Thunderbird etc.
- For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
- Require p11-kit 0.23.5
- Added an utility to help with comparing output of the trust dump command.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-73" date="1489147201">- No longer trust legacy CAs</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
</package>
<package pkgid="1bde3320e682c9d6d935ca94fdd7900d7b94743840108c8d2a5314b67db78bbc" name="ca-certificates" arch="src">
  <version epoch="0" ver="2018.2.22" rel="70.0.el7_5"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2015.2.6-72" date="1461585600">- Fixed a typo in a manual page (rhbz#1303960)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2016.2.6-73" date="1462881600">- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-71" date="1484654400">- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
- Use comments in extracted bundle files.
- Change packaging script to support empty legacy bundles.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-72" date="1489147200">- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
  as a preparation to fix bugs in the interaction between p11-kit-trust and
  Mozilla applications, such as Firefox, Thunderbird etc.
- For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
- Require p11-kit 0.23.5
- Added an utility to help with comparing output of the trust dump command.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-73" date="1489147201">- No longer trust legacy CAs</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
</package>
<package pkgid="f179fe64ea8bfb381e2c667b7890b6c01e9b274edc698ca1fedddd35390a13ed" name="ca-certificates" arch="src">
  <version epoch="0" ver="2018.2.22" rel="70.0.el7_5"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2015.2.6-72" date="1461585600">- Fixed a typo in a manual page (rhbz#1303960)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2016.2.6-73" date="1462881600">- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-71" date="1484654400">- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
- Use comments in extracted bundle files.
- Change packaging script to support empty legacy bundles.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-72" date="1489147200">- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
  as a preparation to fix bugs in the interaction between p11-kit-trust and
  Mozilla applications, such as Firefox, Thunderbird etc.
- For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
- Require p11-kit 0.23.5
- Added an utility to help with comparing output of the trust dump command.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-73" date="1489147201">- No longer trust legacy CAs</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
</package>
<package pkgid="c93c85c796fe6ec270ed2e9d84a3dbd3c644effca25b289443cc61d02dd27bb5" name="centos-release" arch="i686">
  <version epoch="0" ver="7" rel="5.1804.1.el7.centos.i"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1507032000">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
</package>
<package pkgid="e3257ea42ad327addbb7112d74b065113512423efca075ae1cdcbacba796e060" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.1.el7.centos.i"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1507032000">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
</package>
<package pkgid="21e24d67322c4d3a101cd611c50d8e7a65572442bc79cb7ae361deb1abc4ee31" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.1.el7.centos"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="48d2a04bea31ea42ab4ad714d078bfdfa8f233bc6df1da9a49e1e6382e861b14" name="centos-release" arch="x86_64">
  <version epoch="0" ver="7" rel="5.1804.1.el7.centos"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="d2dcbb4f1d9ee71deb5435d5ba7052a010bc5d16aae9abceff8353626e1e434d" name="centos-release" arch="i686">
  <version epoch="0" ver="7" rel="5.1804.2.el7.centos.i"/>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
</package>
<package pkgid="651457bfe5015918471f38b68b1567dc8a65b64827e459e74c332992ed669c0d" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.2.el7.centos.i"/>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
</package>
<package pkgid="9af306df74b3246e417bc9be4ec90880e3ee37ce33c2a4fb3fb78c397870b38b" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.2.el7.centos"/>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
</package>
<package pkgid="9f134593a519f58228b130cc7872f8255ff0316ef6650219a307c5a3b056ba4e" name="centos-release" arch="x86_64">
  <version epoch="0" ver="7" rel="5.1804.2.el7.centos"/>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
</package>
<package pkgid="3871ca789f500f152711e917bdca77540e6f3d0dad644fa30e75f4127686ef12" name="centos-release" arch="i686">
  <version epoch="0" ver="7" rel="5.1804.4.el7.centos.i"/>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
</package>
<package pkgid="07910c2e121a6798a9eeede9b93f03f65f5c0a27625efae1f7cd5e94ff2a8ab1" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.4.el7.centos.i"/>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
</package>
<package pkgid="ae6bcaf3093db18014f5706c52c208ed3c8dd6c260a517c32f5e12e28eb71cdb" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.4.el7.centos"/>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
</package>
<package pkgid="7690a7c48571ef7a4bb8f0a4d61da651a8c0b1318fb6708a8a5af7d28b1bfd0c" name="centos-release" arch="x86_64">
  <version epoch="0" ver="7" rel="5.1804.4.el7.centos"/>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
</package>
<package pkgid="067c8b8cc39e2a6f6e30fb01c97abf40f539be431751833922eda3126d227af4" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.1"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="ae7cee9bbc8ea7b764100e39de52c0ccbfaf69bfc1b0a0b48b1dd2cb1d332202" name="centos-release" arch="x86_64">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.1"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="4a2b4b109e5f653e635cafc9d208bee3036a2ac09cf3a7daf8fa3e5452b666b3" name="centos-release" arch="i686">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.2"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="57e09024206d3fd7dce6ead5045f8f785c48fb46522f4e19d851fc50df927efa" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.2"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="b74be00b71b86ad4277700f748ad8141055d3d768de45ad34e9b7c66d9a358ec" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.2"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="f8c01b8c83b4aa530de1d8756e0494aec5067738a9c5697b393338dd4fef2ea9" name="centos-release" arch="x86_64">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.2"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="8cb949d6b14f26a1353811ecd3cc0a100b22a0a31e8b9115fa562ced4a7565ab" name="centos-release" arch="i686">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.i.1"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1507032000">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="f9f913eacd2a734e99235bb5ac73a5e97fd0670d718ced9d4a01b850f236b265" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.i.1"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1507032000">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="3fb875780729c4acd3822c6207e0d005f9171829052876d4424cb70356e9b9a7" name="centos-release" arch="i686">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.i.2"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1507032000">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="d46f57d338668ccc9df4e8aee5dbe35cc706e7c84476c219923ff775b5412a9b" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.i.2"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1507032000">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="98de4c021cf7e1c527d586d53ed82b8e77807f041191bc1d678f0292c0db4083" name="certmonger" arch="i686">
  <version epoch="0" ver="0.78.4" rel="3.el7_5.1"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 0.75.13-2" date="1408622400">- Rebuild for rpm bug 1131960</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.75.14-1" date="1409227200">- make pathname canonicalization slightly smarter, to handle ".." in
  locations (#1131758)
- updates to self-tests (#1144082)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-2" date="1416398400">- backport dogtag-submit: accept additional options to pass to the server when
  approving requests using agent creds (#1165155)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-3" date="1421150400">- backport change from git to correctly retrieve string values from DBus
  property interface replies (#1181022)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.1-1" date="1434974400">- Resolves: #1140241 RFE: Add SCEP support to certmonger
- Resolves: #1148001 ipa-getcert killed by SIGABRT
- Resolves: #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.1</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.3-1" date="1437739200">- Resolves: #1244914 scep ca helper does not parse command line options
  correctly
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.3</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-1" date="1439208000">- Resolves: #1249753 challenge password not added in csr using start-tracking
- Resolves: #1250397 Remove certmonger rekey feature in 7.2
  - Remove rekey feature
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.4</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-2" date="1467374400">- Resolves: #1345755 Support for specifying IPA lightweight CA
  - Add 'issuer' request option for specifying issuer
  - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
  - Comment/whitespace fixup
  - ipa-submit: Retry without "ca" on OptionError
  - getcert: fix a potential out-of-bounds
  - Document the -X option in the ipa-submit man page
- Resolves: #1351052 certmonger build for RHEL 7.3 failure
  - Stop assuming RSA 512 works
  - Stop assuming RSA 512 works, part two
  - Fix a flakiness in the 028-dbus test</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-3" date="1473163200">- Resolves: #1367683 getcert request command fails to use Sub CA using -X
  argument
  - Fix CA option name for ipa cert-request</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-3.1" date="1522152000">- Use required DER encoding when setting CA basic constraint (#1560961)
- NSS 3.34 more strictly enforces length checking when verifying signatures
  (#1560960)</changelog>
</package>
<package pkgid="ce6b32d78e8ee3132bc67d4d66f3cdced2d1e265f4d0cffc5c0c8ce0c1081abd" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="3.el7_5.1"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 0.75.13-2" date="1408622400">- Rebuild for rpm bug 1131960</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.75.14-1" date="1409227200">- make pathname canonicalization slightly smarter, to handle ".." in
  locations (#1131758)
- updates to self-tests (#1144082)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-2" date="1416398400">- backport dogtag-submit: accept additional options to pass to the server when
  approving requests using agent creds (#1165155)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-3" date="1421150400">- backport change from git to correctly retrieve string values from DBus
  property interface replies (#1181022)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.1-1" date="1434974400">- Resolves: #1140241 RFE: Add SCEP support to certmonger
- Resolves: #1148001 ipa-getcert killed by SIGABRT
- Resolves: #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.1</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.3-1" date="1437739200">- Resolves: #1244914 scep ca helper does not parse command line options
  correctly
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.3</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-1" date="1439208000">- Resolves: #1249753 challenge password not added in csr using start-tracking
- Resolves: #1250397 Remove certmonger rekey feature in 7.2
  - Remove rekey feature
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.4</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-2" date="1467374400">- Resolves: #1345755 Support for specifying IPA lightweight CA
  - Add 'issuer' request option for specifying issuer
  - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
  - Comment/whitespace fixup
  - ipa-submit: Retry without "ca" on OptionError
  - getcert: fix a potential out-of-bounds
  - Document the -X option in the ipa-submit man page
- Resolves: #1351052 certmonger build for RHEL 7.3 failure
  - Stop assuming RSA 512 works
  - Stop assuming RSA 512 works, part two
  - Fix a flakiness in the 028-dbus test</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-3" date="1473163200">- Resolves: #1367683 getcert request command fails to use Sub CA using -X
  argument
  - Fix CA option name for ipa cert-request</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-3.1" date="1522152000">- Use required DER encoding when setting CA basic constraint (#1560961)
- NSS 3.34 more strictly enforces length checking when verifying signatures
  (#1560960)</changelog>
</package>
<package pkgid="a442af9018716d6ef83465b5cc54fd91edaf41279a82ca336939f6a696f5c97d" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="3.el7_5.1"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 0.75.13-2" date="1408622400">- Rebuild for rpm bug 1131960</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.75.14-1" date="1409227200">- make pathname canonicalization slightly smarter, to handle ".." in
  locations (#1131758)
- updates to self-tests (#1144082)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-2" date="1416398400">- backport dogtag-submit: accept additional options to pass to the server when
  approving requests using agent creds (#1165155)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-3" date="1421150400">- backport change from git to correctly retrieve string values from DBus
  property interface replies (#1181022)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.1-1" date="1434974400">- Resolves: #1140241 RFE: Add SCEP support to certmonger
- Resolves: #1148001 ipa-getcert killed by SIGABRT
- Resolves: #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.1</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.3-1" date="1437739200">- Resolves: #1244914 scep ca helper does not parse command line options
  correctly
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.3</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-1" date="1439208000">- Resolves: #1249753 challenge password not added in csr using start-tracking
- Resolves: #1250397 Remove certmonger rekey feature in 7.2
  - Remove rekey feature
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.4</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-2" date="1467374400">- Resolves: #1345755 Support for specifying IPA lightweight CA
  - Add 'issuer' request option for specifying issuer
  - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
  - Comment/whitespace fixup
  - ipa-submit: Retry without "ca" on OptionError
  - getcert: fix a potential out-of-bounds
  - Document the -X option in the ipa-submit man page
- Resolves: #1351052 certmonger build for RHEL 7.3 failure
  - Stop assuming RSA 512 works
  - Stop assuming RSA 512 works, part two
  - Fix a flakiness in the 028-dbus test</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-3" date="1473163200">- Resolves: #1367683 getcert request command fails to use Sub CA using -X
  argument
  - Fix CA option name for ipa cert-request</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-3.1" date="1522152000">- Use required DER encoding when setting CA basic constraint (#1560961)
- NSS 3.34 more strictly enforces length checking when verifying signatures
  (#1560960)</changelog>
</package>
<package pkgid="1b120c37a56d14af0208ffbcc33727872dbc32ee3ba4a4c9d824769e83dd20b8" name="certmonger" arch="x86_64">
  <version epoch="0" ver="0.78.4" rel="3.el7_5.1"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 0.75.13-2" date="1408622400">- Rebuild for rpm bug 1131960</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.75.14-1" date="1409227200">- make pathname canonicalization slightly smarter, to handle ".." in
  locations (#1131758)
- updates to self-tests (#1144082)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-2" date="1416398400">- backport dogtag-submit: accept additional options to pass to the server when
  approving requests using agent creds (#1165155)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-3" date="1421150400">- backport change from git to correctly retrieve string values from DBus
  property interface replies (#1181022)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.1-1" date="1434974400">- Resolves: #1140241 RFE: Add SCEP support to certmonger
- Resolves: #1148001 ipa-getcert killed by SIGABRT
- Resolves: #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.1</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.3-1" date="1437739200">- Resolves: #1244914 scep ca helper does not parse command line options
  correctly
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.3</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-1" date="1439208000">- Resolves: #1249753 challenge password not added in csr using start-tracking
- Resolves: #1250397 Remove certmonger rekey feature in 7.2
  - Remove rekey feature
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.4</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-2" date="1467374400">- Resolves: #1345755 Support for specifying IPA lightweight CA
  - Add 'issuer' request option for specifying issuer
  - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
  - Comment/whitespace fixup
  - ipa-submit: Retry without "ca" on OptionError
  - getcert: fix a potential out-of-bounds
  - Document the -X option in the ipa-submit man page
- Resolves: #1351052 certmonger build for RHEL 7.3 failure
  - Stop assuming RSA 512 works
  - Stop assuming RSA 512 works, part two
  - Fix a flakiness in the 028-dbus test</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-3" date="1473163200">- Resolves: #1367683 getcert request command fails to use Sub CA using -X
  argument
  - Fix CA option name for ipa cert-request</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-3.1" date="1522152000">- Use required DER encoding when setting CA basic constraint (#1560961)
- NSS 3.34 more strictly enforces length checking when verifying signatures
  (#1560960)</changelog>
</package>
<package pkgid="d3dc23c1758764f82d06d07cd845ba0e5032514c667bcfc8fcec63efb85351b3" name="certmonger-debuginfo" arch="i686">
  <version epoch="0" ver="0.78.4" rel="3.el7_5.1"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 0.75.13-2" date="1408622400">- Rebuild for rpm bug 1131960</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.75.14-1" date="1409227200">- make pathname canonicalization slightly smarter, to handle ".." in
  locations (#1131758)
- updates to self-tests (#1144082)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-2" date="1416398400">- backport dogtag-submit: accept additional options to pass to the server when
  approving requests using agent creds (#1165155)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-3" date="1421150400">- backport change from git to correctly retrieve string values from DBus
  property interface replies (#1181022)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.1-1" date="1434974400">- Resolves: #1140241 RFE: Add SCEP support to certmonger
- Resolves: #1148001 ipa-getcert killed by SIGABRT
- Resolves: #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.1</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.3-1" date="1437739200">- Resolves: #1244914 scep ca helper does not parse command line options
  correctly
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.3</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-1" date="1439208000">- Resolves: #1249753 challenge password not added in csr using start-tracking
- Resolves: #1250397 Remove certmonger rekey feature in 7.2
  - Remove rekey feature
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.4</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-2" date="1467374400">- Resolves: #1345755 Support for specifying IPA lightweight CA
  - Add 'issuer' request option for specifying issuer
  - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
  - Comment/whitespace fixup
  - ipa-submit: Retry without "ca" on OptionError
  - getcert: fix a potential out-of-bounds
  - Document the -X option in the ipa-submit man page
- Resolves: #1351052 certmonger build for RHEL 7.3 failure
  - Stop assuming RSA 512 works
  - Stop assuming RSA 512 works, part two
  - Fix a flakiness in the 028-dbus test</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-3" date="1473163200">- Resolves: #1367683 getcert request command fails to use Sub CA using -X
  argument
  - Fix CA option name for ipa cert-request</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-3.1" date="1522152000">- Use required DER encoding when setting CA basic constraint (#1560961)
- NSS 3.34 more strictly enforces length checking when verifying signatures
  (#1560960)</changelog>
</package>
<package pkgid="dca3a8fa263ba91799abd96ec55d6761fdeba98d5ba5d8ccb83fbc84f1775a0a" name="certmonger-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.78.4" rel="3.el7_5.1"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 0.75.13-2" date="1408622400">- Rebuild for rpm bug 1131960</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.75.14-1" date="1409227200">- make pathname canonicalization slightly smarter, to handle ".." in
  locations (#1131758)
- updates to self-tests (#1144082)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-2" date="1416398400">- backport dogtag-submit: accept additional options to pass to the server when
  approving requests using agent creds (#1165155)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-3" date="1421150400">- backport change from git to correctly retrieve string values from DBus
  property interface replies (#1181022)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.1-1" date="1434974400">- Resolves: #1140241 RFE: Add SCEP support to certmonger
- Resolves: #1148001 ipa-getcert killed by SIGABRT
- Resolves: #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.1</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.3-1" date="1437739200">- Resolves: #1244914 scep ca helper does not parse command line options
  correctly
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.3</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-1" date="1439208000">- Resolves: #1249753 challenge password not added in csr using start-tracking
- Resolves: #1250397 Remove certmonger rekey feature in 7.2
  - Remove rekey feature
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.4</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-2" date="1467374400">- Resolves: #1345755 Support for specifying IPA lightweight CA
  - Add 'issuer' request option for specifying issuer
  - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
  - Comment/whitespace fixup
  - ipa-submit: Retry without "ca" on OptionError
  - getcert: fix a potential out-of-bounds
  - Document the -X option in the ipa-submit man page
- Resolves: #1351052 certmonger build for RHEL 7.3 failure
  - Stop assuming RSA 512 works
  - Stop assuming RSA 512 works, part two
  - Fix a flakiness in the 028-dbus test</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-3" date="1473163200">- Resolves: #1367683 getcert request command fails to use Sub CA using -X
  argument
  - Fix CA option name for ipa cert-request</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-3.1" date="1522152000">- Use required DER encoding when setting CA basic constraint (#1560961)
- NSS 3.34 more strictly enforces length checking when verifying signatures
  (#1560960)</changelog>
</package>
<package pkgid="59b5e043b9194903631e1e63e12a3d400856d78dbf2dfc8f37e202e8d8852ada" name="cloud-init" arch="i686">
  <version epoch="0" ver="0.7.9" rel="24.el7.centos.1"/>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-17" date="1511265600">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-18" date="1511524800">- Start the cloud-init init local service after the dbus socket is created
  so that the hostnamectl command works.
  Resolves: rhbz#1450521</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-19" date="1512043200">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1492726</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-20" date="1513512000">- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1519271</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-21" date="1516017600">- sysconfig: Fix a potential traceback introduced in the
  0.7.9-17 build
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-22" date="1516017601">- Apply patch from -21
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-23" date="1516017602">- Fix a bug tha caused cloud-init to fail as a result of trying
  to rename bonds.
  Resolves: rhbz#1512247</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-24" date="1518523200">- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
  published correctly when bouncing the network.
  Resolves: rhbz#1434109</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.7.9-24.el7_5.1" date="1526558400">- ci-Revert-azure-Fix-publishing-of-hostname.patch [bz#1568717]
- ci-DataSourceAzure.py-use-hostnamectl-to-set-hostname.patch [bz#1568717]
- ci-sysconfig-Don-t-disable-IPV6_AUTOCONF.patch [bz#1578702]
- Resolves: bz#1568717
  (Add patch to bounce NICs in Azure/update DNS [rhel-7.5.z])
- Resolves: bz#1578702
  (cloud-init-0.7.9-9.el7_4.6 breaks IPv4/IPv6 dual-stack EC2 instances in AWS [rhel-7.5.z])</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.7.9-24.el7_5.1" date="1529928000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ba87a5dec17b622e5d1c4d7588fe5f9fc80e0d3a84206f36b5ab5d836645b76f" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="24.el7.centos.1"/>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-17" date="1511265600">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-18" date="1511524800">- Start the cloud-init init local service after the dbus socket is created
  so that the hostnamectl command works.
  Resolves: rhbz#1450521</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-19" date="1512043200">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1492726</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-20" date="1513512000">- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1519271</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-21" date="1516017600">- sysconfig: Fix a potential traceback introduced in the
  0.7.9-17 build
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-22" date="1516017601">- Apply patch from -21
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-23" date="1516017602">- Fix a bug tha caused cloud-init to fail as a result of trying
  to rename bonds.
  Resolves: rhbz#1512247</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-24" date="1518523200">- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
  published correctly when bouncing the network.
  Resolves: rhbz#1434109</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.7.9-24.el7_5.1" date="1526558400">- ci-Revert-azure-Fix-publishing-of-hostname.patch [bz#1568717]
- ci-DataSourceAzure.py-use-hostnamectl-to-set-hostname.patch [bz#1568717]
- ci-sysconfig-Don-t-disable-IPV6_AUTOCONF.patch [bz#1578702]
- Resolves: bz#1568717
  (Add patch to bounce NICs in Azure/update DNS [rhel-7.5.z])
- Resolves: bz#1578702
  (cloud-init-0.7.9-9.el7_4.6 breaks IPv4/IPv6 dual-stack EC2 instances in AWS [rhel-7.5.z])</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.7.9-24.el7_5.1" date="1529928000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="9cfaa504481fbe388a17e2286cd33f6bb6dcebc73fded4fcc8fe4c3894e9697c" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="24.el7.centos.1"/>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-17" date="1511265600">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-18" date="1511524800">- Start the cloud-init init local service after the dbus socket is created
  so that the hostnamectl command works.
  Resolves: rhbz#1450521</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-19" date="1512043200">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1492726</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-20" date="1513512000">- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1519271</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-21" date="1516017600">- sysconfig: Fix a potential traceback introduced in the
  0.7.9-17 build
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-22" date="1516017601">- Apply patch from -21
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-23" date="1516017602">- Fix a bug tha caused cloud-init to fail as a result of trying
  to rename bonds.
  Resolves: rhbz#1512247</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-24" date="1518523200">- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
  published correctly when bouncing the network.
  Resolves: rhbz#1434109</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.7.9-24.el7_5.1" date="1526558400">- ci-Revert-azure-Fix-publishing-of-hostname.patch [bz#1568717]
- ci-DataSourceAzure.py-use-hostnamectl-to-set-hostname.patch [bz#1568717]
- ci-sysconfig-Don-t-disable-IPV6_AUTOCONF.patch [bz#1578702]
- Resolves: bz#1568717
  (Add patch to bounce NICs in Azure/update DNS [rhel-7.5.z])
- Resolves: bz#1578702
  (cloud-init-0.7.9-9.el7_4.6 breaks IPv4/IPv6 dual-stack EC2 instances in AWS [rhel-7.5.z])</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.7.9-24.el7_5.1" date="1529928000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="65414f9cbc9e53c109c80c3955105efa0e65f1c64119a8b488dcf4f3dd06f619" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="0.7.9" rel="24.el7.centos.1"/>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-17" date="1511265600">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-18" date="1511524800">- Start the cloud-init init local service after the dbus socket is created
  so that the hostnamectl command works.
  Resolves: rhbz#1450521</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-19" date="1512043200">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1492726</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-20" date="1513512000">- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1519271</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-21" date="1516017600">- sysconfig: Fix a potential traceback introduced in the
  0.7.9-17 build
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-22" date="1516017601">- Apply patch from -21
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-23" date="1516017602">- Fix a bug tha caused cloud-init to fail as a result of trying
  to rename bonds.
  Resolves: rhbz#1512247</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-24" date="1518523200">- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
  published correctly when bouncing the network.
  Resolves: rhbz#1434109</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.7.9-24.el7_5.1" date="1526558400">- ci-Revert-azure-Fix-publishing-of-hostname.patch [bz#1568717]
- ci-DataSourceAzure.py-use-hostnamectl-to-set-hostname.patch [bz#1568717]
- ci-sysconfig-Don-t-disable-IPV6_AUTOCONF.patch [bz#1578702]
- Resolves: bz#1568717
  (Add patch to bounce NICs in Azure/update DNS [rhel-7.5.z])
- Resolves: bz#1578702
  (cloud-init-0.7.9-9.el7_4.6 breaks IPv4/IPv6 dual-stack EC2 instances in AWS [rhel-7.5.z])</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.7.9-24.el7_5.1" date="1529928000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="7daefd1f4f5d8f5fcaf619fabaec90785ed59f6d9c5406c4de6adc5680e2ec3d" name="cmocka" arch="src">
  <version epoch="0" ver="1.0.1" rel="1.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-2" date="1358424000">- Fixed Source URL.
- Fixed package groups.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-3" date="1358510400">- Fixed typo in Source URL.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
</package>
<package pkgid="cfc2279daba20c19f5db5e73b20b7299f7436e83f1dcc1d4e500e456910db342" name="cmocka-debuginfo" arch="i686">
  <version epoch="0" ver="1.0.1" rel="1.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-2" date="1358424000">- Fixed Source URL.
- Fixed package groups.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-3" date="1358510400">- Fixed typo in Source URL.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
</package>
<package pkgid="acd42fc654ccf8667a4492ecc8c3f7a318fffbd2625bba19bbdc619ca8dacae7" name="cmocka-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="1.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-2" date="1358424000">- Fixed Source URL.
- Fixed package groups.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-3" date="1358510400">- Fixed typo in Source URL.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
</package>
<package pkgid="d5777c71a8bb51b019c858b8820befef0e5cc60987c2783d05f443bd82159ca5" name="control-center" arch="i686">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="4dcaa53d338db0922f229db85c5947ec5e2cda178cdffe6512067471a97b806c" name="control-center" arch="src">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="8b2caeb17d401b6119cd68528f1356b786254f51527a89629a6545ddc3472bf6" name="control-center" arch="src">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="836fab7f37813f5a961b8a01a453e647bc075aaa3ba5b4070b1cfe4973ba7ac9" name="control-center" arch="x86_64">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="986a4bc86d05c7b9db60f59357da89f45a57c500d7932b02c83e9524e65204cb" name="control-center-debuginfo" arch="i686">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="686e3c6d58c74e97d2d929df61c9e198453e2230643180d41a75a03521b99edc" name="control-center-debuginfo" arch="x86_64">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="8ec6a47752c080e46857a3e213f66eab7fd39702b7d11875b3bfbc4036a152ce" name="control-center-filesystem" arch="i686">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="1793fe9df04062253b68e0e1751d3db364f1a2a1d3cf9979af0909271852a450" name="control-center-filesystem" arch="x86_64">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="4f95af3fa13c6d9cd621ed127bc0d07f5028a39143a090e6343454935ab650b4" name="coolkey" arch="i686">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="29415c047c08fd7392c239d5dca0f4388475a9d5be296614e5d03e0a82226011" name="coolkey" arch="src">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="4a55193e80c539ac396c1b4381065d1fa02ac014433f5ab4ca685e2a3e1e7476" name="coolkey" arch="src">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="f36160be5991228a42ba9870a018fd785517f5c023f0a235b7bdb401355c87bf" name="coolkey" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="7ec21bbec5e64648667dc4d3f12b667e97f164e8d2037f10a25ef44a0c20b84c" name="coolkey-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="ea57787bc44f9678711fb0faa89f8c1146ec1e49f6431759e32fdc6922bb216a" name="coolkey-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="bb1a44c8e63dfb88331dad7f12fcb571027983bc77a2033cb0799782ef051d83" name="coolkey-devel" arch="i686">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="9686a1917769f69393b0ac34d693f3c8b587316bca5cc42fe4d3cbfba21ea9a3" name="coolkey-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="aca5ff27f815fba0a548f511afb74af48f861238b9e47a635332059ba358e03f" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="70dc52e4cf9812c91551a34959c24eadd5386fbdcb030aa857d2dbc98de9e064" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="5d4f639b9ed33f6a55104bd0111b4d5354b959f4864630792726ee4192070917" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="e65a7c29857fa3f6fd6bf33e2caa805b66d3b780618793871b116887d4726bda" name="copy-jdk-configs" arch="noarch">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="27f90e8f8de54b248268950150e40096db345b0489527ec20e40783f6ed2af9d" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="2d317486e8212a35c4a81c3271d10f9833e78103b3093a60ba1a30566f4f2331" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="0898cfe350a8735e64345251ece5cfb46b26fd2f99130eab9bc9cb89ec703409" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="a7477428f1e2f327b2cf7cb871d8c2fe26d49ccf02c13511edabf41c07dd986d" name="copy-jdk-configs" arch="src">
  <version epoch="0" ver="3.3" rel="10.el7_5"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-3" date="1460462400">- commented requires on lua posix to stop blocking composes.
- changed it to 644 to dont mislead by executable flags
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-5" date="1468324800">- posttrans silenced, the error is appearing only in state, when there is nothing to copy
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-1" date="1470744000">- updated to 1,3 which fixing nss minor issue
- Resolves: rhbz#1296430</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-1" date="1480593600">- updated to upstream 1.3 (adding jre/lib/security/cacerts file)
- Resolves: rhbz#1399719</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-1" date="1497355200">- added "jre/lib/security/blacklisted.certs" to cared files
- moved to newest release 2.1
- moved to new upstream at pagure.io
- added new script of copy_jdk_configs_fixFiles.sh 
- copy_jdk_configs.lua  aligned to it
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-3" date="1497873600">- updated to latest head
- Resolves: rhbz#1427463</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-1" date="1509710400">- updated to 3.3
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-2" date="1509710401">- added another subdirs for policies files
- Resolves: rhbz#1503647
- Resolves: rhbz#1503668</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-3" date="1524657600">- fixes issue when java.security for openjdk7 was erased
- Resolves: rhbz#1573163</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-10" date="1525089600">- added javaws.policy and blacklist
- Resolves: rhbz#1573163</changelog>
</package>
<package pkgid="5d0860a95aaab7c5d1bef61da46ede3f4911736ebbd203d1fb7f2c5a217d6f5a" name="corosync" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="9bee49930bebd9d9f097e9d520cd2e19ff33080695883328f63bff9bd47a4537" name="corosync" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="129021316391f084e6498fe4b1f9d883a0db61f8c2161673ea1f539946d87dd4" name="corosync" arch="src">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="296421f00c77ae93382c3668cafc914187e6751b0b898b8165c39e4605900323" name="corosync" arch="src">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="82bce9dd0c140e0f288281dfd79041918170aa41946ad28971a51eec3f5af1cc" name="corosync" arch="src">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="a784e00289ab117e739a8de0282c1cc39ea1dc047a9d0b2b96abfea4045f808b" name="corosync" arch="src">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="1af9ee857ca7f909090368be98fd8d3a8f01f380fb3391ab4836ef9b45bc23e3" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="ab705fbd5799898f8e2d3c4dbe70f26488530b05d6301d8300827700400ebae6" name="corosync" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="c5c8391052eb48bf30c9ff42590c115f1a9532048b864d8d743d6bc050531d9a" name="corosync-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="9dbbfa7e71049d2c9d03c0e3ded9d068deca9bac279eddb0538e2088d80f1eb3" name="corosync-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="456cbc55c17477678edf49ec5b34b150afbf0d264c4839728a730e69a23947a7" name="corosync-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="1c4cb9e5a711d20d20d3804a5bd47cc621a4580bc87264387b29dc7fc84b60e1" name="corosync-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="63f7003de2e8c509c18d2bd6af95fa92f49f3261c5bdb1c6e66582b5eccd8c82" name="corosync-qdevice" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="122b55aa87239c339f5e9112427b2ac3dea71ce9639fdf45a9c677f3030587c7" name="corosync-qdevice" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="d9fa1542bb8c0565a94d9dd50ee27fa767534bde181e195e83cf5df8cd84f6a3" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="18f5904b00783ad697af44e2d046825abad75ba9df33e54693f251fc716c6953" name="corosync-qdevice" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="7cd4043ac7781d6539e3d2b02b67608d16ed929532c0c44fb172911f71110f2a" name="corosync-qnetd" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="d8593374776f825e087347849b20c5eb701fafc5af212f8f8256853b23887cba" name="corosync-qnetd" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="b143fd6626e8a62865756c6d57f8b740acd5dd113674bb72cc21b3f6a2c27c23" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="d21f9ceba6cea49288f82f59b854e56c5b3adb8f6981165800bf341d63210abe" name="corosync-qnetd" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="4b5cb8a968447763312c6cda01cf910bc4256ac77b3c154cacf070d02ccf75a7" name="corosynclib" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="9b2b701ef94baba892fd01213e8e670dde4e60bee3367a517b9b26f0a9d1f27c" name="corosynclib" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="73fa95febe0628f2edce20619c5ed84e3a05d43e079bbf6aca479ba4d41ec874" name="corosynclib" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="c4f6312af5ee9e1f0621aa725665bf7a91521f8a36c6c9a610d3a41aac92e42f" name="corosynclib" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="4898c0869c4c817bc4fa52a6c09978d39b99affc1979a43b3280ff9eb7bd796e" name="corosynclib-devel" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="de23b67f353909ff6838740ef287a72ff8b9fca3c037372a0ee7c5af61b328ca" name="corosynclib-devel" arch="i686">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="60e68450d97da211de85e969cc4ffa17bf4e92714b1ee5ad979bdc334e7391f2" name="corosynclib-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="5c4962ce0a81c497da370ceee61111179a6f77f5ff29336fcb3a7825244b95dd" name="corosynclib-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="2.el7_5.1"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-4" date="1472644800">- Resolves: rhbz#1367813

- Man: Fix corosync-qdevice-net-certutil link (rhbz#1367813)
- merge upstream commit 49a9f722bba13e4b2762151b7b96b1d4196fd5e0 (rhbz#1367813)
- man: mention qdevice incompatibilites in votequorum.5 (rhbz#1367813)
- merge upstream commit 0da1b7446239424b76b1d5eb7c3640afce9b054e (rhbz#1367813)
- Qnetd LMS: Fix two partition use case (rhbz#1367813)
- merge upstream commit b0c850f308d44ddcdf1a1f881c1e1142ad489385 (rhbz#1367813)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-5" date="1484827200">- Resolves: rhbz#1289661

- Enable ppc64le build</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-6" date="1490097600">- Resolves: rhbz#1371880

- libvotequorum: Bump version (rhbz#1371880)
- merge upstream commit 96f91f23a6a413535cc2f0e8492e2300373fed40 (rhbz#1371880)
- votequorum: Don't update expected_votes display if value is too high (rhbz#1371880)
- merge upstream commit 596433066805af029be1292a37a35ce31307f0bf (rhbz#1371880)
- votequorum: simplify reconfigure message handling (rhbz#1371880)
- merge upstream commit 4a385f2e94c7168dbd92168c54a80ee97a3c2140 (rhbz#1371880)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-7" date="1490097601">- Related: rhbz#1371880

- Fix build on RHEL7.3 latest (rhbz#1371880)
- merge upstream commit 19e48a6eee20d5f34f79a3b8d4e1c694169c1d7b (rhbz#1371880)
- Enable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-8" date="1490184000">- Resolves: rhbz#1434528
- Resolves: rhbz#1434529
- Resolves: rhbz#1434534

- cfg: Prevents use of uninitialized buffer (rhbz#1434528)
- merge upstream commit 52e6ae57ea06d0bef61c5c9250881bef1372ead2 (rhbz#1434528)
- man: Fix typos in man page (rhbz#1434529)
- merge upstream commit b642904ea9640bd7a1573a8c0d2c5bcb43a10dfc (rhbz#1434529)
- Fix typo: Destorying -&gt; Destroying (rhbz#1434529)
- merge upstream commit 117d9e4eb77ef9941fdeaf17ddfd892514da8143 (rhbz#1434529)
- init: Add doc URIs to the systemd service files (rhbz#1434529)
- merge upstream commit 21a728785027483786e41c19f6aff57a95b80aa5 (rhbz#1434529)
- man: Modify man-page according to command usage (rhbz#1434529)
- merge upstream commit 79898e8cb1715e79b7467b91661b7341e2664550 (rhbz#1434529)
- Totempg: remove duplicate memcpy in mcast_msg func (rhbz#1434528)
- merge upstream commit 4a8e9d80409590cb42732ae3105b5ae71fda52c1 (rhbz#1434528)
- upstart: Add softdog module loading example (rhbz#1434529)
- merge upstream commit 75474d69bebea6c9c4ef2252476ce738cf92f0f4 (rhbz#1434529)
- Remove deprecated doxygen flags (rhbz#1434529)
- merge upstream commit b252013e42007ea7284ae54d035a30ca40f20fc0 (rhbz#1434529)
- Remove redundant header file inclusion (rhbz#1434528)
- merge upstream commit d6c7ade277a4a23d84c56d7fde6b60b377a1023b (rhbz#1434528)
- Qdevice: fix spell errors in qdevice (rhbz#1434529)
- merge upstream commit d9caa09c45d4560c89a1ad873087c0476cabab46 (rhbz#1434529)
- doc: document watchdog_device parameter (rhbz#1434529)
- merge upstream commit a5f97ae1b99063383d8f45168125b34232b91faf (rhbz#1434529)
- Logsys: Change logsys syslog_priority priority (rhbz#1434534)
- merge upstream commit 609cc0cc100aa1070d97b405273373682da0e270 (rhbz#1434534)
- logconfig: Do not overwrite logger_subsys priority (rhbz#1434534)
- merge upstream commit c866a2f8603b44e89eb21a6cf7d88134af2e8b66 (rhbz#1434534)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-9" date="1493208000">- Resolves: rhbz#1445001

- Main: Call mlockall after fork (rhbz#1445001)
- merge upstream commit 238e2e62d8b960e7c10bfa0a8281d78ec99f3a26 (rhbz#1445001)
- Disable aarch64 build (bz#1422598)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.0-10" date="1508241600">- Resolves: rhbz#1439205
- Resolves: rhbz#1461450
- Resolves: rhbz#1469170
- Resolves: rhbz#1476214

- main: Don't ask libqb to handle segv, it doesn't work (rhbz#1439205)
- merge upstream commit c0da36a6c0ecf7bc7def252a06336a7088e68086 (rhbz#1439205)
- totem: Propagate totem initialization failure (rhbz#1461450)
- merge upstream commit 0413a8f4672352171f0df731b7d9c1fe20acbc4c (rhbz#1461450)
- totemcrypto: Refactor symmetric key importing (rhbz#1461450)
- merge upstream commit a885868181c07ba9ab5cdfdad1d66d387b2a4428 (rhbz#1461450)
- totemcrypto: Use different method to import key (rhbz#1461450)
- merge upstream commit 5dadebd21862074deaeb9a337fc9e49f5e9f692a (rhbz#1461450)
- main: Add option to set priority (rhbz#1469170)
- merge upstream commit a008448efb2b1d45c432867caf08f0bcf2b4b9b0 (rhbz#1469170)
- main: Add support for libcgroup (rhbz#1476214)
- merge upstream commit c56086c701d08fc17cf6d8ef603caf505a4021b7 (rhbz#1476214)
- totemcrypto: Fix compiler warning (rhbz#1461450)
- merge upstream commit fdeed33f514e0056e322a45d9a0a04ca4b9a2709 (rhbz#1461450)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-1" date="1508500800">- Resolves: rhbz#1413573
- Resolves: rhbz#1503008</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2" date="1517832000">- Resolves: rhbz#1536219

- logging: Make blackbox configurable (rhbz#1536219)
- merge upstream commit 8af39f66e56e319b6b93804c0400e6e29737a90f (rhbz#1536219)
- logging: Close before and open blackbox after fork (rhbz#1536219)
- merge upstream commit 995ed0bd814ff3eacf6c09534841e6ce39ab6614 (rhbz#1536219)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; 2.4.3-2.1" date="1523016000">- Resolves: rhbz#1560467

- totemcrypto: Check length of the packet</changelog>
</package>
<package pkgid="68a337fa8b9aee5722de7ef4f894205176494b9744df3431493374d294ba50b6" name="cpp" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="e9d021318067053b8f6f38781d4b12898529d3a439488efee13005c556cd967a" name="cpp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="fc447ba73df428552bfe4825a8bcf9da72ff0bbaeacc1cd39c27d7cec860a70f" name="cpp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="cedf75edf6098c0c3f5d831ed153a4b79f8c5f41d5f2c13d46bda15da2ffa430" name="debugmode" arch="i686">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="67e9347bdbf9b1f24bc115fc69a60055b50d7665c59aac11e70f6d6e0a95d713" name="debugmode" arch="x86_64">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="993a1ccbf3e69ee48383b207df74b55fa3b19eded45fa6dba3485fd4b5fbcf1e" name="device-mapper-multipath" arch="i686">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="71a4b5d8e181c3f0c3d2a8b542c16174f76362787c267a8b01d657831760cdcc" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="5081dfa16edc111a03761fb4d5f132ee72f1b523ff1c15273edaead128873e7a" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="bb6fcae53cb133ce5890a27e9d54f56b4533eab9faea94e5e26afe35221267bd" name="device-mapper-multipath" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="d06f29cb0d1be104e70073d9aab4de42f839a24bed044c9744c82002bef04930" name="device-mapper-multipath-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="cb8c2a868226eff1880c506b39576f760f914d4986a649db25581a289558082c" name="device-mapper-multipath-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="f2d908e340d043b1c7e4acb86c0866444d420675c9e4d8769bee4a758a71d260" name="device-mapper-multipath-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="998e1c8da26fafe5feb6dd2e1ac59db9cf8b6e3ef637cef06f3ccabe4111e51b" name="device-mapper-multipath-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="138f10bdd9a97ea5ae6b00fe57f20a0aa9be81701393bcfa4ea7d85079a8e3c5" name="device-mapper-multipath-libs" arch="i686">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="a323602668375e59fcd95dcb59aa4a699666591b0464972dbab304383e207e22" name="device-mapper-multipath-libs" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="646d1a7e07e836a83712f9fd30ad8687e3795dddc60d14abb204f1cf304eff01" name="device-mapper-multipath-sysvinit" arch="i686">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="4d0f77203544dbeddb4423833e807debe06157ee0bfa1f32eac481b0dee3ccff" name="device-mapper-multipath-sysvinit" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="6eb957abf683afad140f0185732141de5a2a67ad0fc5abe6098000ca7ca46802" name="dhclient" arch="i686">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4f1f87e0f9982bdd48c56cb32a46e8bd3b905291e352bd3b9fa6fd9aec144970" name="dhclient" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="57f035a8dabe5d97467ca35985507f422552f7cf9f6a5d8ae384e8a36b20f9ea" name="dhcp" arch="i686">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3c10d43670064a03a12231ad864b4b9d9023e9ffbf2491f08ed1d7e66853e59f" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d6fdc4f4e6d40b705c06fe6d7c7f9c356e18f6e7c1021ccd13d92880427fc16e" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="eede2607e5c399840621bd1b0ce911fef49b6bb0bc771552f78d3f04903f2db1" name="dhcp" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0cf20234dad22ab8e89818c5f762ded9c230a7cf8d9f4339685045695500d97f" name="dhcp-common" arch="i686">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2b9232d2e5a910f2c1ff4e8f24e6fe2d637f713dccc988cd990ddb00ccadfeee" name="dhcp-common" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="77c13c9d110c6e3c32be334d3a1096c88809f2858d3e05af7c9683989c4dd0ac" name="dhcp-debuginfo" arch="i686">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="85bbcf84bab297ef2b9b64735964afe5e80c0f45cdc0593d970832ed5cad1e87" name="dhcp-debuginfo" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="fc56fa21f2e8e860fac31c154657c581312c1a372056a57e7e33aec3a7046405" name="dhcp-devel" arch="i686">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="55754979672a609b9448581bcc5614ca3b4a124779485411ecc595435e0577db" name="dhcp-devel" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="267751ddaa7cb70e12e9539ef9b2ca84e9ee5bf7046c3d3bec92b462cb1819bc" name="dhcp-libs" arch="i686">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7f88435c52f91954c5828c2daebab9c8823f65eb8892ae088fb875e29f3adb09" name="dhcp-libs" arch="x86_64">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3adf7a49affe954a3aa8a0a4e3fa43b9128433fe98f72ab997a2e56c7e92036d" name="dracut" arch="i686">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="3a57de61b797ae2475287e22d26535dc12e49e27358ed69a3a7f38154beebddd" name="dracut" arch="src">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="ad437be1a11842724ddb362dcd30b13842f57c7115eaf8563459872b6fea8f93" name="dracut" arch="src">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="e326bd0abcad12084114c4a403f74fa9d3b1cf6da4cb073f5ac35630eaa89b5b" name="dracut" arch="x86_64">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="ee48cb6447119da6894bc563f963ee81785f23007030b34e1aeddae61a5b95a8" name="dracut-caps" arch="i686">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="8f535dcbf67c2c8bc1ad02643e2c81f9dc334a10883b8d4fd0a7a7f55ba79522" name="dracut-caps" arch="x86_64">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="8f940822140cdd325f3d1e5b583304423fa45b523d8a259f41594c9109cbda01" name="dracut-config-generic" arch="i686">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="30715f94553233162263d6df8305ff79c866cad6dc6babb80781eb2509d2e444" name="dracut-config-generic" arch="x86_64">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="3d2fba055c0b2ab25de8a5c9a3f13eac4dbdd175fb42b660aa3e604d30ded9cc" name="dracut-config-rescue" arch="i686">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="87463b0df0c44d0c1a7647bbffa36195b79beaae59db03ceae730c887e61e183" name="dracut-config-rescue" arch="x86_64">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="18b39507ec25ec144f6e4ff5c0df44c8236831b2220cb2b6f177017fff2b5b61" name="dracut-debuginfo" arch="i686">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="4146112ed072ae12b23bd4e1957bc64809aa6fd2c2cb792fb53f586a5b8623c4" name="dracut-debuginfo" arch="x86_64">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="b5f89df2fd466ba5cd391bc5af52fa7debd4f716ba7e97f12fdac2eb85d67454" name="dracut-fips" arch="i686">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="23288dda0e5f5f316020f030e4c7295b44df8558c24bb557ee80f7d1ef940c6a" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="f227064dfc3ca95fe160c77ac99a640b649d3b3254a9beb75dcffea7a255c9d3" name="dracut-fips-aesni" arch="i686">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="ee936340c195d99608555b3c99a536ddf9589586a56d09aca4fa82e9002830c8" name="dracut-fips-aesni" arch="x86_64">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="dcca062a5511083b1fdc443d7eef31fb9eed4ebaae04659b70299fea73b07abc" name="dracut-network" arch="i686">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="1a9bb35519d0455b64d56562d1b2ad14f5c5c5f0ec2b6be4036fc249834e59f5" name="dracut-network" arch="x86_64">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="2e6e991ea412f792d4d70a710f6b25dba9533f7af28856d8461b27dc00811419" name="dracut-tools" arch="i686">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="32af41718db808ae1dcb12504599dcdf97309d921ce0d6eb1acb3c4df5193e75" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="542dfe918ec54f144bf7664e80a928f255f5d8731f8ed335a2cac0260ee66dae" name="e2fsprogs" arch="i686">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="f99b90557c4d48f0180d745b06a6a689fdd82fa86a474bc36d28cd9295960d58" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="5b06386ab396938d80f0eed9c0815b7ef513c2652889182ea08b6370f953716a" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="b31c2d0ded5efe16a760b3e6028d32bcdc4b9be8f9a88f0fa3e2a9bc4f6e40b2" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="b802fa92d89972c02261776b140ee90091ff665aa7131257e9331d958d70df49" name="e2fsprogs-debuginfo" arch="i686">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="2044bc32b591e65cc60178b1efbb814bfa3fdb495d4202f0090d83806b38763f" name="e2fsprogs-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="6708bd955f34091940cec4aed5738fb8ee60ff172947648f098b104cc89c7b2c" name="e2fsprogs-devel" arch="i686">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="071fb0ffe16ef102fc1ee96f74c1a8e79b230d8a1b8f8822dabab42a8a11904f" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="2fcea9fcc74900ab1678d071a8bc9639753ffc48bd7805f369e217b0c05a0156" name="e2fsprogs-libs" arch="i686">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="5a7e03cfcfd1b48c4255d8317a92285c17d9497604f1f7edbbc5eab12149286d" name="e2fsprogs-libs" arch="x86_64">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="b39f6ae0a964185444e878852e74d20094439af95fd131afa7614aa351cb4e07" name="e2fsprogs-static" arch="i686">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="d733d81240c7d99c970ad8f8ddaeee59958d2af1845008ef7d435e586068cece" name="e2fsprogs-static" arch="x86_64">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="c83214e3ea7c56b90b6d03cdbc3ea097d22ea628e1a775a719053f6d055c4f3f" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="0fbd156dcbd64e50048ed76c585aa0290c29f323357a4faf802e4c6b715cebb2" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="5ed88cf6acdbfce3c9d7b2701301db372a294b98b216b1dfc04267b3a0063403" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="cf7b2e3877800129fce7746914968b797a4e4612fd47362dfa92dd0bacdedff6" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="e9305240e7fde6e371ed23d4973c1d5982519466cba5401081b1a69761fed9a6" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="b440342137ba274198df243ce871d79d72b2ce6354696bed9c25b7327babf6e6" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="bf546463b2dd62e1f12140235ad40c4944a0543b55cd547cef59b838eb45eef9" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="643f81c977b99f00b57f325abf180957e21c1566b885e45ea7aaa76f0680a9fa" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="dbc02ab8c0aee8c68cd33cf36df71319c9fa48794c5b1ee1123b5eec494a9f9d" name="fence-agents-all" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="029bc3be4b6436bf4622d4df69a9f3862d3c9eed87a465185a173cf789238e8c" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="35f1583c3786ffa06da01881ae61b0da3d2a5e02a527c70816b8bd26d579c623" name="fence-agents-all" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="526a96a423b4370213f568aa4bcb4b3a65091ba871778e39aa22939680862124" name="fence-agents-all" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="18a9b4a51c960fb98a13c3fd536593bd9d52f5afb13f785c11333fbbb00f7a15" name="fence-agents-amt-ws" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="f5d795949adf645bae8849f30f2923835aad85fdfc95a3bcc0eb44050e0ce24a" name="fence-agents-amt-ws" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="c27874bed26c91e6ec52b9b49791f035d91a6f8b233e690c2496e07583aaccbb" name="fence-agents-amt-ws" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="155535b2de2666a71e8a4f77e9be1e6cb6643dd39edec2fef70be809ef8932e3" name="fence-agents-amt-ws" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="9a3d29d5f71f2caf5118b62c01df003b5eb641bdc8c4782b09132602e35a2caf" name="fence-agents-apc" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="a846724edf7275762b55eecea2862b5dded47ced85cd4423f664b4711999f5ad" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="0370e5c3a300c017563224e151e31307e74b4fce1936d7fda60410daff0029df" name="fence-agents-apc" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="71340aee49a235561801727c63e21d807f2002ceafa7171458f1e6823087264d" name="fence-agents-apc" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="691fa3e1b511578ef8405831cdbc394ea933c41cd7912f412a85ac2acd77f1ef" name="fence-agents-apc-snmp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="6373d47720442a53be641a5269fa879dda954427138248b2888323c704292875" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="f026bb4671ede12f8aabc2a3f4a628213675baf8554c49f226d3c839221e4b43" name="fence-agents-apc-snmp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="d8065f2124c78f6556a209ed3ac04ada30dfcede4e226c955ac65758c5871dec" name="fence-agents-apc-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="96a04ab3b4737cf6ae317f2cc8de9b0309da38b8706e4cc25c46efb881ebd38f" name="fence-agents-aws" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="b6e37dd4e4b7345e6260db03f20d958d1828379e6b3cda41b12aee220646e4e7" name="fence-agents-aws" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="2b4d34ae35c464a9d4268a914bd6662b82566e66f52480fea0d56a5f2e0b496f" name="fence-agents-aws" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="943a9d057ff70e57923b499845e06a8d3c2c528d8164c55664b6690db03a3cba" name="fence-agents-aws" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="b12cb2bc96adb8c2c0dc66f57e147d4476cf6581b9718dd9c887ea12bfbfd33e" name="fence-agents-azure-arm" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="cc969669682a833d3cca429a2587e6744b35b0c5259819184c0d421d0cbdb1ec" name="fence-agents-azure-arm" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="86028d271730e4a941346bd3e2e7fc3290875331ae6806362ceb984f7b2081de" name="fence-agents-azure-arm" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="caf31bf8a0547d7bf10775fe34125e1b8d1e1c7ba8b5e919380ca7a3e2b6f570" name="fence-agents-azure-arm" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="8893436f55bed2bff783c5d16c76f39af6799fcace07f91cadab2ccc2ba13e32" name="fence-agents-bladecenter" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="8a4390b7245b29ecec38c9346a535141cdb01ebc2a1209a8cd14b8f28a778b57" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="08bcd6fa9e0024286595696344729542685d62f92587ac57b7d4bec03250fe3e" name="fence-agents-bladecenter" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="476b0eaf0f4ecd161c674a647eec264b150e027f5f6704b672a76207091045ba" name="fence-agents-bladecenter" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="7e09efcadc1e942b54b500173d10bde019759bb94e2545a5b307444c5b59308e" name="fence-agents-brocade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="d34d09537d530da4eaf0d8aad86e0f95ec1dae72d210404d222165e7fd14da32" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="5c19ef82a76fe91588115e19422bda45d3513c7c138b1c4254b10e1e205e9b4d" name="fence-agents-brocade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="eac1eefa840ea604239533656ccaf63815f32cc9c462fd37b8f1b04151ec8137" name="fence-agents-brocade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="c04f218f125ed33f8dab5943cc241b95030355fce49599bb7362d8fb16f4fb2b" name="fence-agents-cisco-mds" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="68416189defa9270a256e02a657b9a69bbb62e07ece3246788f7ab0086e2ca3f" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="1868fc06b63822802811575d6fc015521bcd341d5ca3c6eaafde551883ced783" name="fence-agents-cisco-mds" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="ef16bca848c6dfe0e93e1c7a3598b7fdcc4160af98e45884ef2b7d21951965d3" name="fence-agents-cisco-mds" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="116d9be4bfe33022b5d1bd060333abe945a17493cf3aa80f9c7731f35a3f16de" name="fence-agents-cisco-ucs" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="f47f622c112d426844589a44d34dabfe63cd86802990bba517d73d79b0f08853" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="23e1b4ed2a2afbba379893a5cb9edabda999338dfbfefa38742f2612cbf70020" name="fence-agents-cisco-ucs" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="6cfc314d6289ec9ec70dbb1918a0f56b887823d8503073dac8ac7ec2dcd6d885" name="fence-agents-cisco-ucs" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="65f10de53dd34e8e72c9980585a92ce7ec03db0165a547fa8d699a34d63e9287" name="fence-agents-common" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="ddf2ed24413e73258bdfc1f1786157356672ef7469e7743c8d03b59375d92935" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="00e2cc599704b6fc37239bdbbb97c77a5c9943adf6564541d49f17b6003a6d49" name="fence-agents-common" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="6ec6aaa93f519ac6f5bd0bfbcad4ee5d008793ee707ba92b346965c4b65100f0" name="fence-agents-common" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="ea6496421954f2a8db1ee9b02dd77fb3ff6bc43b7901fd4979ace5bb07df3572" name="fence-agents-compute" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="b849d5658a5034984fe95bd7bdfe425f119a9b676134043715b6209198e10f20" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="dc91ec51690a0b889af4c74f3c31c3d6484f8d2a8b6da590035f473accd2427d" name="fence-agents-compute" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="e7ef04817fbc0446feb970e8df41a696f9d362bb92f2160379aa25eb8571ad7f" name="fence-agents-compute" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="390e26a73f086b0b7db98a5b7d78b3255b1661a8f86715c9b56de0dd46e7dee7" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="aafae150577f783599e718102d68bb77b05890c84934404c2b0e062ff0c9886f" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="991522436b0db58acb01c433d824594757fa2bda883089b351d1b80f527283e5" name="fence-agents-debuginfo" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="a6af4a13929c7e754c8dd59d355eb0b9a9a106efea2b7a2a2e5b3eb30b3092a4" name="fence-agents-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="92a6f7c31b6f10439c8987576c525bf7229f465d948969ceb4b91dfd339ab53c" name="fence-agents-drac5" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="137f723728f62731c0767b6c7fa92da674591bc55c0af58395a9dd27ca7d1d55" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="80eaebf7ad6329f14b285680815bc635ffb6c35bf8d38dc3e1cb59906ea1cf17" name="fence-agents-drac5" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="97ed6206ecbe68f082880004464142604261507eec590dd8b7cf028d67817870" name="fence-agents-drac5" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="a808aaaf31574082e43bc17d37bb8bb497f9e5429717deac7859318fd68c04a9" name="fence-agents-eaton-snmp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="61dc177ba5c23c80fdebd26a9159d797c7c7a46aee0f32b4a3eeb146dbb3694a" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="98fc69715cbfdd133ef82afe302ea77adb07dda16b8735cb1c59d0be0833765b" name="fence-agents-eaton-snmp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="572f18ed973b5a26cad472aeb57f27bdbd40bb90812cd6b2a8f0e75e3b4fd78a" name="fence-agents-eaton-snmp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="112e4edd849614e8da4e06d7c0c680a35fc3be87e8b24abe174aee9b0671f123" name="fence-agents-emerson" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="fda76d6564bc65e6fd2024353b71c2944cc6cc57f601dae670a4505921be2a4f" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="09b7971776fbd4a3a39f8e10e5483b6eeb583eb33a43262bc83fe4dd453c49be" name="fence-agents-emerson" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="9210dfdc9431b8c83a907564f22c270e9a1f3daa3521a24f408748b2b9a3f713" name="fence-agents-emerson" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="1890822044baf307b972f30a82da196c2613972c9c7138c9857e91bdf6791900" name="fence-agents-eps" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="ef84606bbc29afab28629696ff6ab95e5f85f01b985a72123358dac60d8cd081" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="a629a083d91dfa63427fe4ec794a30b908205800e1a37251521d7c3713824063" name="fence-agents-eps" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="8977918bc9ba5541f6648da783f33f8faa2febb07eed976e6a1f8b3c6839d6bd" name="fence-agents-eps" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="e314e98c791961f4ef7c736c132bef0d6d55185fa7de1cb97bb09663f311301f" name="fence-agents-heuristics-ping" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="6c5347fe19d993e58baf1104d47972aa0c44f7591529b57a5b300c72aa364edb" name="fence-agents-heuristics-ping" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="1fa12640913b9cef9dee38a985b4b1e5dac522e77a1141378066ea64e4c7dc97" name="fence-agents-heuristics-ping" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="63608652d37c1d4afc4b787c66ef1cbe827ced41b72ea5b9a8cc2fd4e6b7015c" name="fence-agents-heuristics-ping" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="ce2e9a6761be0a8b4191cc4386ce8a48d090ca5d09435e6621e5b8859e2d3ef2" name="fence-agents-hpblade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="e02c93155f5828899e72d3e6754d73f7fd4d43ebfe845ae56afbba22ef65b441" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="fc63aa133f19b39ceda62d26f070ede688ca47d9438dc10999621d27765218cb" name="fence-agents-hpblade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="e9ec6184e25b5005fcebd3123c0b5b9fae14901ab9f080330ba1381811086532" name="fence-agents-hpblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="968aa7fbea433e092ea9fa1ba1c3bec0b4aff5049016c83781fa24a844066610" name="fence-agents-ibmblade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="d7198223bba0662a139e218d873c588c27dc47349bc4e93308d8ece1448b1a9a" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="821bdfa62710ef0933e1eb0657ff3bb2bcef5e9394b05efc7f7709ff5bf39707" name="fence-agents-ibmblade" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="5a28bc38098a36b68da8f9def303b26f47e492a4d611675cc27a02bafb1fb67d" name="fence-agents-ibmblade" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="abdcfecbfcf4b378d07ad7454a2547c6523371d8cd849d89fe9328a1356924df" name="fence-agents-ifmib" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="9cbfcc986577450458a31526579ef4f1603da2a676b383f9c16d5dab5c3fe694" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="1935d9377e8e615c1b5d7efc7984aa6c1383a2f2810edd42778ce9da863464a3" name="fence-agents-ifmib" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="8743b54b70aaf7a7cea75d5656d7851e5115913ed12be3963f392554182fdfa3" name="fence-agents-ifmib" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="27bc9db05288ed4ba8dda7c9274953697f1384439fccef94902c695559a85e2b" name="fence-agents-ilo-moonshot" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="72ae3341825d3e1e4440076f5e34dcb69334ef563d2c758802b5c8bf7277552b" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="13fabeb796b7a0b77ccfe648fd9e75e91ac777d0876b1b35eb460748e6a07ef0" name="fence-agents-ilo-moonshot" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="3f6f83fed7b76867a4d8d62be383df84429394cbc758d445e9d427f3e9466f91" name="fence-agents-ilo-moonshot" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="060ad451bfb29b998f7a34ce78c7a95d68f621a58327df7fd9f404d8b7364c1f" name="fence-agents-ilo-mp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="f37a5b09a0782dfb1fc01dd7ab7521add4214771c7476490b0a34149fa0e86f0" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="8f8d183b487265025d0b0ca3684fe840aaae440e5ad2600d3926c51fbf06d3ba" name="fence-agents-ilo-mp" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="17cd00e4b513f4f6ff748dc304c4c415a4f59f25d2298905f02b4d5e09389856" name="fence-agents-ilo-mp" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="642af45aa85e4c6e90b07c79d384e0636e2e376b76403bfb64df4355bc39e5f6" name="fence-agents-ilo-ssh" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="04696f31ba08e74fcd30ac5cf416584ba8cc37de199d9d93731490b333945ff9" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="17280f4891011188d54d638f19160b462bf7446bf679d6720cff6d88a6a7514f" name="fence-agents-ilo-ssh" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="e898cb78a340978492ac5d10969e5c9a1a454670507f53037ef203134f234afc" name="fence-agents-ilo-ssh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="3fed810b8bb79d329b34c02b183daa5c74e10135511b5e84b5be5b8eb23d024d" name="fence-agents-ilo2" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="2bd1b946ab62c92a17020f06ad6bad6b59302cb62e47e278bd51fb40fcfaca7c" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="971448ab62e91f8ebc177be7c8b5f625e21b0296f0d84cb390572a35045327ae" name="fence-agents-ilo2" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="3e2eee966bb9cbeffdaf5f7dc00aa625868356ddce3c4821288ac32615ecbe7a" name="fence-agents-ilo2" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="b5f03f4cd23c17c88d98da83bdc997bcb5630e2cc3e455cf2e3d01bfd1169879" name="fence-agents-intelmodular" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="c09cca6416b66d152e70c8c7e255f0756bc031168bbe4627103eb181e07a2fb7" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="881682a8f27104f731c6a8256ec84ed6fa7c6fa4c448f2e67b82bb80f183c594" name="fence-agents-intelmodular" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="3212e990a5a49488b16dd9643906fa0f8d5f271d051dc5207ab26621db3cb59c" name="fence-agents-intelmodular" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="d86762538e60bf0044671a720401c480bf75940e50c68185d090094668d7d9a5" name="fence-agents-ipdu" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="9503c5d53e798cc388750aeeb688cb7f035c19a199772c349c58df1bab8c6f33" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="77b83ec13340f6564b65a44ad4d289f46a1055fda40f71c72dac163f5ca1576b" name="fence-agents-ipdu" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="35b620b916ac62eb0ffe9bbeaea9d4c5d4ff0ff08fc5a34ea5593f562de5ca43" name="fence-agents-ipdu" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="e49f5cb2d503d2d53ee6fac3beaaf0f2eb48b97adff650a2c4acf074b0383c80" name="fence-agents-ipmilan" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="f08141d11d3e986b043445451b20f30966f8616c9dc74343e186b60ee3e23f1e" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="a147f9e0ea7745cb63991dc84b4c82389c80bf193e86e636f0b2fb6bd6099227" name="fence-agents-ipmilan" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="515d7fa8dc042199efe57953137c608173fa05f39930493c56d72e4fbcad645b" name="fence-agents-ipmilan" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="b25a8fcf668a74cb7a126d5b6d0451188675299dab0296cebcf03d9b782b860d" name="fence-agents-kdump" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="20423de011e839c071c2a9d2e8b2b98ed31f72cf9f9ad729c3f8529fc76560e2" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="f7a969fcebbca249c45c348e5152044bd28afe20bb4325cc1eb0a6857b0d7c26" name="fence-agents-kdump" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="6d27e6c35bfba36b63cac541809450da0fcb25f8c64d877dbcf2d02f22d1b596" name="fence-agents-kdump" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="13198e33d9b43f63788ae15611a4546e8a59a8393354a9967ff5da41b70c4897" name="fence-agents-mpath" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="b935889f54935542c24a228b3c59287026e1fd211dab7cea630d9898b5742d60" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="6bcd686dbf57160dc545c1f6e2a5ca23630b06aa614a88f28f29dcba9ab3df1a" name="fence-agents-mpath" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="e4f7ad0bd24e63b9eaae6fcaa90eafc24ecee640a7c1f5df5c51f6f873a9cc51" name="fence-agents-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="d7a8e3ce3e458a07062a3a662dca757d5a6af220625a2b88aa76da3032027538" name="fence-agents-rhevm" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="8e03ecd104b092205fc5bafa5d5761730e9552b87af43ac1d1f8d1573e97257b" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="972ac78f10362027b54380d53c6d8e0b96f415bf21ae7ae5f0f86fba85a41315" name="fence-agents-rhevm" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="bbbc9652b23567f08841919337e662380e77e955429fe1bf5866fc320969a1f0" name="fence-agents-rhevm" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="5395fcc78a745e31352e372a0fbf4d399f74a4ac578eb26d54c343ab62483f9b" name="fence-agents-rsa" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="42f9537fa269a3da9b7db0f7c948c76c8218d548310ccee5f253c8c6c3346ca4" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="c0a45a956cb971ad0794db096be6ab2c6d4fd21f92c8c190ca468829edcd6c6f" name="fence-agents-rsa" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="23253556ac65d1ed6920b7afa58483a044dadd416ba2412957128ea431530e05" name="fence-agents-rsa" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="870c71100f14f788b1c64e9f830558e1e3caf9112565edb876397dd7edbceeed" name="fence-agents-rsb" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="a5424763a71e99ebff526f048b3fc9f6470f9e4e0b16a925511451fdff8f33f6" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="d31714659629c1acb26c501a6718caaa06bb070204d5f95705717f2cb7c3c0e6" name="fence-agents-rsb" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="b32639df12d6f598d8833a2a9aa03e220ebd5d7a3a678c919c9b457d1ac633fd" name="fence-agents-rsb" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="12051b515143a32b1f14a1b8039e5b29bdb6117708069ac8d3ef5d3caf53eae4" name="fence-agents-sbd" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="542cc77d8dfa757f0fd40e73b41f7594a671c151c6b2b4a41119c5b75feab122" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="4dcaec9033b1b7077691cdd3706e34ee7efe33923a1b4cfc58c9b8406002979e" name="fence-agents-sbd" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="e6419f88ad80a976236af99c1bd5418d911085aeb4430505cabc0a3e4f8c3f30" name="fence-agents-sbd" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="afbd15740fc703647b3997d37e5ea3b79a95b006cbbd440b34739ee0f75f8080" name="fence-agents-scsi" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="bffcb72aaf7b89222ab9ebcb17c59d5f170ff5ffe1acbf5003ada03e504e2d12" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="e304323016e6ac50314bb9c50ae487b216e6087a16b5d47bd05d375876cf59c7" name="fence-agents-scsi" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="cad4b41980c401a684ea0e904c16fae2b4e7a7266c357efdc4f3f068e6a4876a" name="fence-agents-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="d90928ff60224653f8f0132cef5993b005c20c800b31eda97f6292815bcca072" name="fence-agents-virsh" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="f87a4926c00e069c964fbe5d02a25e0356f516f673ff43f9cc061a9bbea39a7d" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="63c4e7ca20b2e2bfe030123ebe00e8456a00e5fa8ff85b3e2a02a763b986d00e" name="fence-agents-virsh" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="49cd8e496f3584891f0df8575b425f09b10ab2293c70ff55bf991688e7f22a94" name="fence-agents-virsh" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="c03eeb6e22e09f8ef8f21f2bf6f275a568c77b1cc5e7a133f6ec9eaa29f19df0" name="fence-agents-vmware-rest" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="c685931fbeb68b8bb1bd4c8eea37f7f551682869ea5fd47fa9a114cdc54db325" name="fence-agents-vmware-rest" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="79d0a86722528cc421abad45479c68d1ce76c4610e5e6587271334ca593726cd" name="fence-agents-vmware-rest" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="3799f6e5ea97a94484f58cb2b0519ae669421bd0e8f82ae2a6da39c82012cfea" name="fence-agents-vmware-rest" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="aca5b0d1265250e7eca2dfba5ab802718d5fe58c8ff709a9d08b0bff5431fb00" name="fence-agents-vmware-soap" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="411293f989449af66e4db0def9dd77e506999cc9c742e445ec5ac833fea6fbfd" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="a3cdd8c580b9c62db764a3daf609f342099aef819c1554310a2badbaf123f67e" name="fence-agents-vmware-soap" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="2a52c0238cbafbded1aa80fdd026b81c91d8281a3f36da1ccb4fa81c0b6e6678" name="fence-agents-vmware-soap" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="8fd0e44b61c2cf3ef9599cc251b520adf89c75e2dd5f71b48729a40fa040661f" name="fence-agents-wti" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="28af77f2d4757d7caf7ce28d55b7197f567eeaf4f5cb8191570503025fbacb6b" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="b74409764985a7840d24fb4d11311b4ab6eed60c58ba768080d8058224c006f2" name="fence-agents-wti" arch="i686">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="7f7b7c5959b04256e40be0c904c2040e103ce63b7f79a54d293711cdcbb5ecca" name="fence-agents-wti" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="84dbbee7368e42f4bde795f33041b97a214e579cdf89da4cce46637f6b8826cb" name="fence-sanlock" arch="i686">
  <version epoch="0" ver="3.6.0" rel="1.el7"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-1" date="1411992000">- Update to sanlock-3.2.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-2" date="1414670400">- checksum endian fix</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-1" date="1432123200">- Update to sanlock-3.2.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-2" date="1432296000">- add pkgconfig files</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-1" date="1434715200">- Update to sanlock-3.2.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-2" date="1448971200">- wdmd: prevent probe while watchdog is used</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.3.0-1" date="1456142400">- Update to sanlock-3.3.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.4.0-1" date="1465560000">- Update to sanlock-3.4.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.5.0-1" date="1493208000">- Update to sanlock-3.5.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-1" date="1512475200">- Update to sanlock-3.6.0</changelog>
</package>
<package pkgid="45dd3ba5d6183e0b3593be33bb7385a1c34ae990fa5e86556f95a87ac46ef66a" name="firefox" arch="i686">
  <version epoch="0" ver="52.7.3" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.3-1" date="1525780800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="598e47e4bff7ceb580110b9457e2accd29e9813431550502c6eb61e5a794dbc0" name="firefox" arch="src">
  <version epoch="0" ver="52.7.3" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.3-1" date="1525780800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c1d5674b240b61cbd14cb758abcd94e837c89d88de0d69b446bf71254288b82d" name="firefox" arch="src">
  <version epoch="0" ver="52.7.3" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.3-1" date="1525780800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="31ee71a394d757075de1fe08837e5135bb5b4df1dece5cf9e380d6e75dd479f5" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.7.3" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.3-1" date="1525780800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="eb2f4287c255ff79f9e7c6302a65877c2481ca624e9f7eaeae5012a5bd5e2a18" name="firefox" arch="i686">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525867200">- Update to 52.8.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.8.0-1" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="478e179f91e0dffad4c9c65bb166c82381ac7dfc3122f0cbe4f000e387665b82" name="firefox" arch="src">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525867200">- Update to 52.8.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.8.0-1" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="01526b8aaf19b99fdca65c52569212844df78926f156f25d5d128c395dbf788f" name="firefox" arch="src">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525867200">- Update to 52.8.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.8.0-1" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="7c021900db62dbb0777a30586747de27a4d8285252e50cf74816ebe876f9c45b" name="firefox" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525867200">- Update to 52.8.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.8.0-1" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="5d2c00556c784aa45c0e83a53554d583508b45a65c306a119fbc56f6c5b2f1a3" name="firefox" arch="i686">
  <version epoch="0" ver="60.1.0" rel="4.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-7" date="1526472000">- Added patch from rhbz#1498561 to fix ppc64(le) crashes.</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-8" date="1526644800">- Added fix for mozilla BZ#1458492</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-9" date="1528718400">- Bundling libffi for the sec-arches
- Added openssl-devel for the Python
- Fixing bundled gtk3</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-10" date="1528718401">- Added fix for mozilla BZ#1436242 - IPC crashes.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-12" date="1528891200">- Fixing bundled libffi issues
- Readded some requirements</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-1" date="1529496000">- Updated to 60.1.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-2" date="1529582400">- Disabled jemalloc on second arches</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-3" date="1529668800">- Updated to 60.1.0 ESR build2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-4" date="1529841600">- Disabled jemalloc on all second arches</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 60.1.0-4" date="1531224000">- Manual CentOS Branding</changelog>
</package>
<package pkgid="5ff875da6445c6af2c50e7aa8af9c69507daaf162b3906259b0fceb174b4b037" name="firefox" arch="src">
  <version epoch="0" ver="60.1.0" rel="4.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-7" date="1526472000">- Added patch from rhbz#1498561 to fix ppc64(le) crashes.</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-8" date="1526644800">- Added fix for mozilla BZ#1458492</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-9" date="1528718400">- Bundling libffi for the sec-arches
- Added openssl-devel for the Python
- Fixing bundled gtk3</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-10" date="1528718401">- Added fix for mozilla BZ#1436242 - IPC crashes.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-12" date="1528891200">- Fixing bundled libffi issues
- Readded some requirements</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-1" date="1529496000">- Updated to 60.1.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-2" date="1529582400">- Disabled jemalloc on second arches</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-3" date="1529668800">- Updated to 60.1.0 ESR build2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-4" date="1529841600">- Disabled jemalloc on all second arches</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 60.1.0-4" date="1531224000">- Manual CentOS Branding</changelog>
</package>
<package pkgid="551ec8ef37f269e5cbd46ee4acba9af41867d45e1ec52556eaf8f16c93c1b01b" name="firefox" arch="src">
  <version epoch="0" ver="60.1.0" rel="4.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-7" date="1526472000">- Added patch from rhbz#1498561 to fix ppc64(le) crashes.</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-8" date="1526644800">- Added fix for mozilla BZ#1458492</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-9" date="1528718400">- Bundling libffi for the sec-arches
- Added openssl-devel for the Python
- Fixing bundled gtk3</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-10" date="1528718401">- Added fix for mozilla BZ#1436242 - IPC crashes.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-12" date="1528891200">- Fixing bundled libffi issues
- Readded some requirements</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-1" date="1529496000">- Updated to 60.1.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-2" date="1529582400">- Disabled jemalloc on second arches</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-3" date="1529668800">- Updated to 60.1.0 ESR build2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-4" date="1529841600">- Disabled jemalloc on all second arches</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 60.1.0-4" date="1531224000">- Manual CentOS Branding</changelog>
</package>
<package pkgid="31ecaf8a29df57f6a5458c2ec1e786f3e63027d2a0c83a56444f704b3d14784d" name="firefox" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="4.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-7" date="1526472000">- Added patch from rhbz#1498561 to fix ppc64(le) crashes.</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-8" date="1526644800">- Added fix for mozilla BZ#1458492</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-9" date="1528718400">- Bundling libffi for the sec-arches
- Added openssl-devel for the Python
- Fixing bundled gtk3</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-10" date="1528718401">- Added fix for mozilla BZ#1436242 - IPC crashes.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-12" date="1528891200">- Fixing bundled libffi issues
- Readded some requirements</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-1" date="1529496000">- Updated to 60.1.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-2" date="1529582400">- Disabled jemalloc on second arches</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-3" date="1529668800">- Updated to 60.1.0 ESR build2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-4" date="1529841600">- Disabled jemalloc on all second arches</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 60.1.0-4" date="1531224000">- Manual CentOS Branding</changelog>
</package>
<package pkgid="4e574f9b8ffb4a976835bc51363b59ff11e915b5750a75f9cbefeb9361f77923" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.7.3" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.3-1" date="1525780800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="23bdfb3cff1e83e6f89bc569901566492a8f845f570436f620cb3bbf96474ab4" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.7.3" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497355200">- Update to 52.2.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.7.3-1" date="1525780800">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="758986bbfd0314d054f583a483d6cc6ca4e5a325095f7b7a6b3ffcf89995dd61" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525867200">- Update to 52.8.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.8.0-1" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="42f46e4a02dcdc2a3a94e65bc1a77f98ccdf428c3094613272e4e00d1c914a38" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525867200">- Update to 52.8.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.8.0-1" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e74f60ceea9df6b114f6dbac54bb9c1b54d59c78f2b69387dcc4c506eed49f0c" name="firefox-debuginfo" arch="i686">
  <version epoch="0" ver="60.1.0" rel="4.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-7" date="1526472000">- Added patch from rhbz#1498561 to fix ppc64(le) crashes.</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-8" date="1526644800">- Added fix for mozilla BZ#1458492</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-9" date="1528718400">- Bundling libffi for the sec-arches
- Added openssl-devel for the Python
- Fixing bundled gtk3</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-10" date="1528718401">- Added fix for mozilla BZ#1436242 - IPC crashes.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-12" date="1528891200">- Fixing bundled libffi issues
- Readded some requirements</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-1" date="1529496000">- Updated to 60.1.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-2" date="1529582400">- Disabled jemalloc on second arches</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-3" date="1529668800">- Updated to 60.1.0 ESR build2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-4" date="1529841600">- Disabled jemalloc on all second arches</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 60.1.0-4" date="1531224000">- Manual CentOS Branding</changelog>
</package>
<package pkgid="eeda2d01b541444616cc25c4773fddbadbeb4cb3c660ae2d7bd147ad38014762" name="firefox-debuginfo" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="4.el7.centos"/>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-7" date="1526472000">- Added patch from rhbz#1498561 to fix ppc64(le) crashes.</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-8" date="1526644800">- Added fix for mozilla BZ#1458492</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-9" date="1528718400">- Bundling libffi for the sec-arches
- Added openssl-devel for the Python
- Fixing bundled gtk3</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.0-10" date="1528718401">- Added fix for mozilla BZ#1436242 - IPC crashes.</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 60.0-12" date="1528891200">- Fixing bundled libffi issues
- Readded some requirements</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-1" date="1529496000">- Updated to 60.1.0 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-2" date="1529582400">- Disabled jemalloc on second arches</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-3" date="1529668800">- Updated to 60.1.0 ESR build2</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 60.1.0-4" date="1529841600">- Disabled jemalloc on all second arches</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 60.1.0-4" date="1531224000">- Manual CentOS Branding</changelog>
</package>
<package pkgid="64181973a06bf118cadae295f4c39cee80fab1851dcbd0765738a64d4f302926" name="freeradius" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="298ab8df30b1f70d4f4b8dba5e8ab5b1496febff270b479d5a3aaa8990e6cbba" name="freeradius" arch="src">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="fa199d7105b8f5a2a20b67dfb4b2045431677b990f9a8c305f5aaae62fe259d0" name="freeradius" arch="src">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="fc3328acc215f2b78dbeba1f7b405dcc29d83759aa83dc3288696f15a6978af5" name="freeradius" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="ae429b2cc20c3ad85e29c8378cd9aee65cbe193b8be512ed96adee269ca2e41b" name="freeradius-debuginfo" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="00eeb9718e7c8692bd8cbc1bfc785396cc6ab5b4f7c58e88553f0b1933712b7e" name="freeradius-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="f5c37b3773bb2b810d18c770b5c205cefc89e15de2ea10085ecd4d80e4f5aa17" name="freeradius-devel" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="919980452bc2328c08f09dd05b1b54bfc04b3ec289d6d866d6049bd7a97e5200" name="freeradius-devel" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="b9c75351a0f4c64159e3dd8e7e79f17f206c140f498e750532543023f03579b8" name="freeradius-doc" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="2056b502ad44c4db637cb4da488548ee473242ee4f62e5f2490a3e49281a3063" name="freeradius-doc" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="24c8fcb3a11961155cdf551e7e531621257aa1f3b0c464ace58e98197b38d15e" name="freeradius-krb5" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="bd884eb22583a67224ec50cf03ec4beb6b1fb08ae24cc078a0664ff517c9cf36" name="freeradius-krb5" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="134777e9527b1704e45e243e3b11077fbf02a22a595205c592a18a553f31b86d" name="freeradius-ldap" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="245e5055e506b0b5d169aad4e2472a9e8d8a932f570cfef0706ae63885b36cf6" name="freeradius-ldap" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="9f5926bfe11016d7a615df8afcafc09abd44fe2ce0cbb5e16fa0a52de3965a26" name="freeradius-mysql" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="4e0b00137fee7bd30a0e38dd11b7c2bc26f90acf95bab650b7bf7b6ecb3f37dd" name="freeradius-mysql" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="21cc22ce394d17c3f642099b33005a89702e5c87d28c379b4b77ee22bc4afd31" name="freeradius-perl" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="d5c08ef18f8a65730c370203225716f50b08f6a4f4efa4050bac306383f456a9" name="freeradius-perl" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="6145568ef31eb1903c187e3cc7f7b8506872b0dbf9f6ff3affa695698fa2a382" name="freeradius-postgresql" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="5f641bf64a390a3edfabcbd743fda76af7765cb7e4ab07be5c4e3c5117e57bfe" name="freeradius-postgresql" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="691c258883781e12b17e03cc64c868a7a011cb294c0a70ae411db69fd083010d" name="freeradius-python" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="2ddd610872014668628b0496db4070af61269e70fcdc97d209ba2a87bd20ff75" name="freeradius-python" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="a4a08692179a4d44a7f0100bebf7e76a208dbfad30ee522247a11a9198f88758" name="freeradius-sqlite" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="d00c2e0dfb11cf262cb033e02e05905c9335f3684030665953c8c920e00ddb0e" name="freeradius-sqlite" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="5a0139d376f9e4942c060c5d0441ad84c118c3c0d941b3e799b8499629194120" name="freeradius-unixODBC" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="bd597023d3d7de899eb6d011509e6f2cad98d74e06cf4f5a40949467650ccc1d" name="freeradius-unixODBC" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="e42e16846e38ce4352a5852086cc0c3b062bb272ff864e2826f81dc06fd8f74e" name="freeradius-utils" arch="i686">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="e6d272ee99d8d281c728506a0b0ce2f7356c6b69e900af7f154382a8b83aae4b" name="freeradius-utils" arch="x86_64">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="cd6e94f8672265d9cde37611988b793f3747ce1b024172b4b4b83ded00d2444e" name="gcc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="85fe3f0ffce04941d77ce650457bea5f1fa0bf7e171c43b2804a6078da91245f" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="b3c4adb4778accd94f478913260dcafb7130dedddcbcfee968a1900078114ff5" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="122d2a9411cfbf5dbe1b9b19447632269377021b819c7e0143e0d48991875c4b" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="9a084d74648c59463d789f962ec625a4c51a9da3cee017f4ca75d86ed6ae77eb" name="gcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="c5655734d1a7cc0406c03237bfe746d80d826fe712e4a489366e8af9a368d79a" name="gcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="b3475f4f8e07145b6de1cd3429a5782fc546ddac79ea84fc902f7ca8088f6a6f" name="gcc-base-debuginfo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="3a1173e64278d95bb97e83f1b3a4c9fa9d2b5a07d77c2c4c564b20af5f8ef43e" name="gcc-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="f81bb56bda4db86476086567b74f9a20a7e5811a9cb76352ebb1721e97398fb8" name="gcc-base-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="d783e7db3b0390d3fa4f6d6a813555a2ed165cf3ea81053054e390d79cd5411a" name="gcc-c++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="cb734a8c647808e4f6271b727405dc06b85f66218852c2f8f9566d6216178cc8" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="82a197e4e69fab67d23ae7b6ebc6933a5e6dd5321a96de1955fa132260931896" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="fe24c9d581458e5e069eb186bb43d3196a015e4a5f760a77c9f2498550cf86b1" name="gcc-debuginfo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="41142a1f1ecc720cca3d07e3d9e62b3b54fd23c9bbdad3c019ef720be9bfd53f" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="81304ac9c7f690ad833b1a065acaf69e9d0b7460ab2ad1685f5b3081dacaee8e" name="gcc-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="94c079c2be55dd140e1c9805a5ecad12a15ab55ef8ed84c123969d3685199352" name="gcc-gfortran" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="771c5652f0babf06be64420ee1c32704ea1f26194297636c1e4bbe8804868dc3" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="8d1d9db351bb1c30ab1c6b1eb4a1d79165e78eb916e57855a305d9f2b2060e8a" name="gcc-gfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="fc0c4760e1bd0443a577ae0bbe791ee0e5bf8904da4784be5105e89bc27711fd" name="gcc-gnat" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="7c1a12fd8c0e1c3b5e92ae108d253fce2e05a992b27b51052d21d6ed34f4fb3f" name="gcc-gnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="337ebba50806d8a63818247bfb4afbdafd83c2975f1db67bf298dfee17e2fa1f" name="gcc-gnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="fc63a1cd1c9a777a89883022ceebdc03dde0db988587f07f8e5d121c2cb61755" name="gcc-go" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="e916d919ed5f3299062f3c7dbf0f2501ab737fd46d3c7fdc08e189663f1e7742" name="gcc-go" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="6b4b83f101c369637a904e6a7dcbe3205774be6ec96c1ffb67bd7e6d52531b64" name="gcc-go" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="96c66dbcd2614329437b16979f8a8e87119365cbbbcb49de060b2fb2bc0d2a0c" name="gcc-libraries" arch="src">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="061cba27e52b73b1ff3bfc3bf76461571e677f57e4ea67464b758a018d8c8467" name="gcc-libraries" arch="src">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="ffbe5ceac1ed4b48ced39535165f8e21aa4ae96cdc1994e82187d0dea21e0018" name="gcc-libraries-debuginfo" arch="i686">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="e31903dc059ac99d0c50ad2f1860c6f976ef5e55bbeb37cf9532cf95adde8693" name="gcc-libraries-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="4a6d31c30a35807a48136e945781aa8981a87db56e4a0473eac95dbe9726dbdd" name="gcc-objc++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="d06d800366a5b11d2531978452540627e908d0125c728c82afd69a522b94730f" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="8c8edb72d7e9c8649d81d19d2599729b4447f2ec0e29ae4cc9157f60db138835" name="gcc-objc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="943a511e11be3ac9d1332bc50f8ed1d1457c93a630e998a2c57a54106907c283" name="gcc-objc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="3ffe2452de1aa53acc157755cdd447af1bca8d22bcc502d3aec1395263afba41" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="b627f5d44fc442beed2c291ac490a99f53ecda5aa8746cd7aa3ba46ef3c930f0" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="e4765e98f1f974a1ab517573f25c055d687f2728f927614aa9bd6e9f4aa24c00" name="gcc-plugin-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="0a827b6ccf5c6f63866b36e82c8a7a0e17a334c40d0d3abd4f6db44bd9773489" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="5a3f6660f7c7df8ac64757865a59569f7c69e42117a74962bc2b25b66b73ce60" name="gcc-plugin-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="819ae384d2091c705054dff460078a97ff35ed5a56d34e3bbcae263c19af81eb" name="git" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="5fac424d1aba54e91235d9c99ebc569c2bf4d1ce0eded28744d2ff79a523b87a" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="8e2dcd5f6ec9035b1e2a9c99271896a40adb38a653d5fc2a97d9764eaa7d11fe" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="2ca87a856ddd643826b0d27fd21cea69a2c1a5ffd29e63cd8faa2bf962a8a7d2" name="git" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="c261bce4f7591977e916667ddb8e053a50a1f35d6066932e00a4ab9666427a0c" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="26d034d02a6a3976c344615faee251916790c2d0a672b24371738e12e0ebfa89" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="25f1097b9704e09ee43eaf0e1ebd0c9432fdd7444a2df5ad9f3faf39c9f947c5" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="9025f451e63db62f6802c3f39bddeda02149f5bc9f7592d144f9eb7f0bbe42a7" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="e91bf3fa65f9c4cbe4efc7c6679472a1c22400c938cbbb24e49140dcd249c3c6" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="8be29d647109f8fa9322e5ce69eb576311993e0fd291bb7a585d9697a2001517" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="ea807f82f6c1c9a919304d2fb14a411dd10fdf2199465ce18288bfe3d60a05f4" name="git-daemon" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="8182868592051f1e4ca6dcb454106df39477ff87a14447f22d6f14177afb0d0b" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="6dbe110f29db48a68580e37164af0ca19692fca754fb668a6a28e2473c3fd4bb" name="git-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="dc3ecc48f3681f54f2891153256e3be033239552f79f28b772253c3ef2f0b381" name="git-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="e8f30a55549b3a163e85b0e78c5d3e74d1d013a381bed07c588f51f3648e5d95" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="8e1b155c92ec11bf689793b04ca2d261d8a936ed8b716fe41ea59e59ced1fec3" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="c86ea4b596bd7e4e2ba5ab9ad45455e729f3f57eb72d278211f517a2a7b7dcee" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="b903f78a0e411bb4ccc6cfd297dd7c128f7fad96b1c96660903c256f0fb79b61" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="da6ac9ecb358a5f0f9a655f1f0e612bd6d750b8d584bc0e5c99a5e543abc2e80" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="88a73e74256af15c45f96120707f40cf80b4fb3fc823e7eadef3a249e6a2d46f" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="b3824e22e33b247e013dd1fd5308aca21a7ee8acfa39dd257ccdcd56912f9e25" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="935776c72a9059e1151e6f67f8238fe0510370385342de4f21267b085df0bf2a" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="4c9910fc55ce37654d78c4cddd497fff1a6ca9a39cc799747a04b4e7f3fc25ed" name="git-svn" arch="i686">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="3b40f028a97ba9492ab2c21b7372eabaefa3128a7c6052e5782e4645485359f8" name="git-svn" arch="x86_64">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="d9e4d2954ff1622b5175548b6a0c9530b8620b391423878a6f11c2d943bc5c35" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="388f4bfeb77e9b09d78762ec53934b4c0054daa290398b1cc1fbb9a8cf6574d7" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="c47982d3a933356ff828fe028318b9c234aca520da84ed67e4ee0dbc07bdef6d" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="a7ab3cf8acc64d09c254675651b1b981b37601227d2a7f59b834524d3c1da725" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="7c560fb4344ae76bf834cf1c6e7a1dac9911550e529e444966f9bb9743c110f4" name="glusterfs" arch="i686">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="014153a5677d7e3e8b3d380063f37292aa763c2a144c39895c46b36b9ec24ffc" name="glusterfs" arch="src">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="e11412f65df3f15c06d60faef7b72d7bfcec7f0731f0d77abbf259aa6e972f83" name="glusterfs" arch="src">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="7b1c67caa9854788e222acab0f06e970f4cc2ad5a2ed3bcb06c183e72c76f92d" name="glusterfs" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="9b4899b8d3f9b7d83db4638516c895988fa92f0a1b78210c75ab0cfac5781d3d" name="glusterfs-api" arch="i686">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="f093f44e56a4c116e33284529a810db9be2a204df06d48fa44028ed47ade3553" name="glusterfs-api" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="835ef49830f1e7887e366fc425593e32c6e328e2c72276ba468850c4e8280009" name="glusterfs-api-devel" arch="i686">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="ee5b976a18f990f0296d5e9d156b9a58f0c10af494ea0ccebb4f9685479c27b1" name="glusterfs-api-devel" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="df33af6af8fca16cf5da973fe2240c087b0e4d176402903e04852c68bb365e4f" name="glusterfs-cli" arch="i686">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="79e35a89d15ff5954ee82881a29b9938a65a36f93a3991da4233994f6c57e2e5" name="glusterfs-cli" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="5f4dfad124c1a7abb786f083bb4f68560b7ce4141d815d887a43de00e88c54c5" name="glusterfs-client-xlators" arch="i686">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="f34dfc09a73ac5704f7af24be021bbf10d3ede7e2d4c97ae12c469121a3354f3" name="glusterfs-client-xlators" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="bbdf3920107246a5573daa50cd115f6414149750b2da5e8abcaa91688a055cd9" name="glusterfs-debuginfo" arch="i686">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="6a37171567b2b476650e58cabc21b0cd3441996d92055de615bd353cc923bc23" name="glusterfs-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="a85569498e2861d40fd3a5f65dff1bd9cd381ebcd1b6fd2cba16b07414d1d0f1" name="glusterfs-devel" arch="i686">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="9bb888e25003a1791d4a7f33ac8806239f20562b66c6b971c40837fe2582b051" name="glusterfs-devel" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="6663e83af1f74654b37dd63f3976df381d7cc23e1a3d11a892bc90358d176ad1" name="glusterfs-fuse" arch="i686">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="b37eaa2aa78f1836e189f5c3825b12d037d0febdd1ea259a4bbb935522a28fa5" name="glusterfs-fuse" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="b7103fdaa68238e142a864fcf2414139fc045351b2a0b1f20d03eb0e01804788" name="glusterfs-libs" arch="i686">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="4cadd5b2b686c92a7f6c626beb9ecc74d08bfdd562ec8a2f5d1a698837fa951d" name="glusterfs-libs" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="50e69c6d4675ce7ba6d9306eb2706fa7482acf020316e64094f44098f809b255" name="glusterfs-rdma" arch="i686">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="db6d8215201427675ba4a62a2c1895b19988ecc2eb53433821494828ed697f4c" name="glusterfs-rdma" arch="x86_64">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="4942d0c57ead54d7c96ac942a11fb5b7776434c035bfda2031adcb393004d152" name="gnome-themes-standard" arch="i686">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="d383861f2077faff747c95ad6300211ad46411356e2718997f4155a67de1a620" name="gnome-themes-standard" arch="src">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="09c4fcbdc404aa471e82c90d0f3cf5f2e095275014fcc9aba140ae8d79844370" name="gnome-themes-standard" arch="src">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="071b549c4a60501b9dc5eae2db2c5c2f4f3f7952526df0858cc037c69e2e0133" name="gnome-themes-standard" arch="x86_64">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="265c245c9953ad0cddce3c17cbd7c25d9f4b2aad7862f1498b4920e10cfc5cbe" name="gnome-themes-standard-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="7120756aa65b9770a69df7bd3a79488f17789c18e9a016bc982d18278f9e437b" name="gnome-themes-standard-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="0c747c94e2519b9e5d7ac82ca903235d6632c99bb74c5d7471ac92f3ed985d3d" name="gnome-tweak-tool" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.18.1-1" date="1447243200">- Update to 3.18.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.19.1-1" date="1453291200">- Update to 3.19.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.1-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.19.90-1" date="1455710400">- Update to 3.19.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.0-1" date="1458734400">- Update to 3.20.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.1-1" date="1462276800">- Update to 3.20.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.20.1-2" date="1468929600">- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.91-1" date="1473163200">- Update to 3.21.91
- Set minimum required gsettings-desktop-schemas version
- Update project URLs</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474545600">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-2" date="1523620800">- Remove scaling factor setting, moved to control-center in RHEL 7.5
- Resolves: #1567040</changelog>
</package>
<package pkgid="191caddae9733d76a1f2329de93a2d29537cb819145809493555c61e1bfeb35b" name="gnome-tweak-tool" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.18.1-1" date="1447243200">- Update to 3.18.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.19.1-1" date="1453291200">- Update to 3.19.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.1-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.19.90-1" date="1455710400">- Update to 3.19.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.0-1" date="1458734400">- Update to 3.20.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.1-1" date="1462276800">- Update to 3.20.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.20.1-2" date="1468929600">- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.91-1" date="1473163200">- Update to 3.21.91
- Set minimum required gsettings-desktop-schemas version
- Update project URLs</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474545600">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-2" date="1523620800">- Remove scaling factor setting, moved to control-center in RHEL 7.5
- Resolves: #1567040</changelog>
</package>
<package pkgid="cfde69a85c760d53b3a621571fc1bb32b6ea60ed7105253f679ff6173280f889" name="gnome-tweak-tool" arch="src">
  <version epoch="0" ver="3.22.0" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.18.1-1" date="1447243200">- Update to 3.18.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.19.1-1" date="1453291200">- Update to 3.19.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.1-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.19.90-1" date="1455710400">- Update to 3.19.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.0-1" date="1458734400">- Update to 3.20.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.1-1" date="1462276800">- Update to 3.20.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.20.1-2" date="1468929600">- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.91-1" date="1473163200">- Update to 3.21.91
- Set minimum required gsettings-desktop-schemas version
- Update project URLs</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474545600">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-2" date="1523620800">- Remove scaling factor setting, moved to control-center in RHEL 7.5
- Resolves: #1567040</changelog>
</package>
<package pkgid="f54758f98cb39f31f873f6f8ac948d83f9184c04a91994a1b837e3bda838afa6" name="gnome-tweak-tool" arch="src">
  <version epoch="0" ver="3.22.0" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.18.1-1" date="1447243200">- Update to 3.18.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.19.1-1" date="1453291200">- Update to 3.19.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.1-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.19.90-1" date="1455710400">- Update to 3.19.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.0-1" date="1458734400">- Update to 3.20.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.1-1" date="1462276800">- Update to 3.20.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.20.1-2" date="1468929600">- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.91-1" date="1473163200">- Update to 3.21.91
- Set minimum required gsettings-desktop-schemas version
- Update project URLs</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474545600">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-2" date="1523620800">- Remove scaling factor setting, moved to control-center in RHEL 7.5
- Resolves: #1567040</changelog>
</package>
<package pkgid="fc528f1c7e8b0c5fec37b80f62d255a9e72015fb079bc27f13c0dd5889e21bb1" name="gnupg2" arch="i686">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="222e1fafe16104b65bedd14c848d0bb25230d28426a6e9048a4e04cd1abd61f6" name="gnupg2" arch="src">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="dc9e62239fb707cc3417b2a20485cedbfddf4959a8f79bcac73bd9d568b2fe85" name="gnupg2" arch="src">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="47959558769b62ab0d348b5926e79fef4560bb0a17c960e8513d5e390181c01c" name="gnupg2" arch="x86_64">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="d4da9a6f2b9dd4a503a95f6e57b3a04b2dbb10b890c2ac4ebda330180d6def29" name="gnupg2-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="6209b73beb02f9e2101e7216c9b4affe50f0c09d02e6ceb960e626216b498864" name="gnupg2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="ffca6cf63f0d3d858b62e882d8b3aad15f4268ef73997a3d1dd75960dac882fb" name="gnupg2-smime" arch="i686">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="61f143e8a7d6f29fd47240a24787f211e99d5f130c76c263962e7a6a33bde57b" name="gnupg2-smime" arch="x86_64">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="91df14db5838724f50e5de8b96e4360be4d49a74535020a824e14faa74c185c2" name="gsettings-desktop-schemas" arch="i686">
  <version epoch="0" ver="3.24.1" rel="2.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.91-1" date="1362657600">- Update to 3.7.91</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.92-1" date="1363694400">- Update to 3.7.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.0-1" date="1364299200">- Update to 3.8.0</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.8.2-1" date="1368532800">- Update to 3.8.2</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.2-1" date="1430395200">- Update to 3.14.2
Resolves: #1174444</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Resolves: #1386977</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.24.1-1" date="1505908800">+ gsettings-desktop-schemas-3.24.1-1
- Update to 3.24.1
- Resolves: #1481405</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.1-2" date="1523966400">- Add support for Wacom Pro Pen 3D styli
Resolves: #1568715</changelog>
</package>
<package pkgid="93a4c34b8c3d8bf82558168fb27fabb7718098c478a18d430e1d07ffb1dbfa89" name="gsettings-desktop-schemas" arch="src">
  <version epoch="0" ver="3.24.1" rel="2.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.91-1" date="1362657600">- Update to 3.7.91</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.92-1" date="1363694400">- Update to 3.7.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.0-1" date="1364299200">- Update to 3.8.0</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.8.2-1" date="1368532800">- Update to 3.8.2</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.2-1" date="1430395200">- Update to 3.14.2
Resolves: #1174444</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Resolves: #1386977</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.24.1-1" date="1505908800">+ gsettings-desktop-schemas-3.24.1-1
- Update to 3.24.1
- Resolves: #1481405</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.1-2" date="1523966400">- Add support for Wacom Pro Pen 3D styli
Resolves: #1568715</changelog>
</package>
<package pkgid="8972b84b33afd1ae245495d25c96fdc7d2faabc2031a24f5c449dcd13135af61" name="gsettings-desktop-schemas" arch="src">
  <version epoch="0" ver="3.24.1" rel="2.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.91-1" date="1362657600">- Update to 3.7.91</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.92-1" date="1363694400">- Update to 3.7.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.0-1" date="1364299200">- Update to 3.8.0</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.8.2-1" date="1368532800">- Update to 3.8.2</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.2-1" date="1430395200">- Update to 3.14.2
Resolves: #1174444</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Resolves: #1386977</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.24.1-1" date="1505908800">+ gsettings-desktop-schemas-3.24.1-1
- Update to 3.24.1
- Resolves: #1481405</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.1-2" date="1523966400">- Add support for Wacom Pro Pen 3D styli
Resolves: #1568715</changelog>
</package>
<package pkgid="f774d64d4bf66c0ca72b85a8f13f63959578521a7771b4ba3fbc114b84f377c2" name="gsettings-desktop-schemas" arch="x86_64">
  <version epoch="0" ver="3.24.1" rel="2.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.91-1" date="1362657600">- Update to 3.7.91</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.92-1" date="1363694400">- Update to 3.7.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.0-1" date="1364299200">- Update to 3.8.0</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.8.2-1" date="1368532800">- Update to 3.8.2</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.2-1" date="1430395200">- Update to 3.14.2
Resolves: #1174444</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Resolves: #1386977</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.24.1-1" date="1505908800">+ gsettings-desktop-schemas-3.24.1-1
- Update to 3.24.1
- Resolves: #1481405</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.1-2" date="1523966400">- Add support for Wacom Pro Pen 3D styli
Resolves: #1568715</changelog>
</package>
<package pkgid="79c1bb9cf8e0155a9851fdd14b32ef17d90402ef90c2ab0316992fd83d001512" name="gsettings-desktop-schemas-devel" arch="i686">
  <version epoch="0" ver="3.24.1" rel="2.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.91-1" date="1362657600">- Update to 3.7.91</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.92-1" date="1363694400">- Update to 3.7.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.0-1" date="1364299200">- Update to 3.8.0</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.8.2-1" date="1368532800">- Update to 3.8.2</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.2-1" date="1430395200">- Update to 3.14.2
Resolves: #1174444</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Resolves: #1386977</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.24.1-1" date="1505908800">+ gsettings-desktop-schemas-3.24.1-1
- Update to 3.24.1
- Resolves: #1481405</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.1-2" date="1523966400">- Add support for Wacom Pro Pen 3D styli
Resolves: #1568715</changelog>
</package>
<package pkgid="d645196fc235e0f15f7eb5c41125fa46c0835275996711cef1dbfbe27cc5ead9" name="gsettings-desktop-schemas-devel" arch="x86_64">
  <version epoch="0" ver="3.24.1" rel="2.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.91-1" date="1362657600">- Update to 3.7.91</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.92-1" date="1363694400">- Update to 3.7.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.0-1" date="1364299200">- Update to 3.8.0</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.8.2-1" date="1368532800">- Update to 3.8.2</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.2-1" date="1430395200">- Update to 3.14.2
Resolves: #1174444</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Resolves: #1386977</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.24.1-1" date="1505908800">+ gsettings-desktop-schemas-3.24.1-1
- Update to 3.24.1
- Resolves: #1481405</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.1-2" date="1523966400">- Add support for Wacom Pro Pen 3D styli
Resolves: #1568715</changelog>
</package>
<package pkgid="7b590f4ffa8b35d6035bac939fac5fcece92a0bfb6c6e8f15c1c209d69872a5a" name="gtk-update-icon-cache" arch="i686">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="b92528764ea99c34ab0377462cb22d12263bab3c9846d32647708f861d0be582" name="gtk-update-icon-cache" arch="x86_64">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="9661df2561193268d9993046224cb727ddafe2c96d4fde51ec3346b46916a36a" name="gtk3" arch="i686">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="3444aefa8af08c3931deaff8c8077a7b42c5965378cf7169d5ba5882586e0805" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="b1bca639899857ef82c69f531d9d78eca9cb1dfd48cdad5613f14c60b5c6f35d" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="dbe25cbcb2ab697a3f69f9c6e9049bd1dde261aa4ec2cbd7822f9dfefa7eda35" name="gtk3" arch="x86_64">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="53d16a78a7cbdeec3b209a7faae2f9e669b24f6a5e2e7f5801dade55d8c9297c" name="gtk3-debuginfo" arch="i686">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="ebe9e414309b79035176359f98ea26ff794cbecea061894c539ab9c060a404a7" name="gtk3-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="4c715f884670f3986b64fab7bee60c5ba8703b106f6885fb89093c9fc3f05d55" name="gtk3-devel" arch="i686">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="6b43d99ef6297495020d97301ef8af55ee52da723bb2287fa5d592c05f8d1878" name="gtk3-devel" arch="x86_64">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="03ab9033cd6ba9de8d874a95d1988517f87dd2d11ca9b196632ad1262e68d1e3" name="gtk3-devel-docs" arch="i686">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="cca0783ca773c5bfe336b0cf9d752ff64191d21609825b65f52099066d211357" name="gtk3-devel-docs" arch="x86_64">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="ed1dfd6f44d8f0e3566a08e9d19f9c16d36cdb19d060af29c542ff30733846c4" name="gtk3-immodule-xim" arch="i686">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="c9506d9c354edde632ed9ff1ae90df45b8bd25a1299728b844c95176f6fe42f9" name="gtk3-immodule-xim" arch="x86_64">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="1f2dcbc48039db6147a34d02b1fe75b7f46593768e7df763c7b9316734f7c051" name="gtk3-immodules" arch="i686">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="61ceadae7aabd86c79927439c624dd7dfd59c879ce9f14bf3a81f3b68b25cc51" name="gtk3-immodules" arch="x86_64">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="764947249c603d1a458636aebff4f684c9d5a42a7af0e7353389d409b4947445" name="gtk3-tests" arch="i686">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="bca66cb370d99369b6815d8b57a4621fdccc69858c28fb8c93d9aa3b4dbf1287" name="gtk3-tests" arch="x86_64">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="ca3614b3802b07893304529efe1c06b0aed9a3fc69f140d0b091b39e49f32098" name="httpd" arch="i686">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="da2496f5a2ee27f9abf8ca068c77f772c9cd987733ec5392cabae16f3808d7b6" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="7586ba9489f147bbf8569d0a774ddd0400e62eadd57f59f523ef9e81cb0b0748" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="96a57b9ea0534ea43e99f390fcc790bda72c30df4be362e053468ff1776c09a4" name="httpd" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="329c83dc32e41c558e87660b220baf024a5fad18eb9c57eb434d6a2984ea64b7" name="httpd-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="1210fe4ee20536d6e656950fde5c5d397275524d5d450cc3ea20341261ac98d6" name="httpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="2332fb8e543d114a5da51875c35673269407fdd3ebb3753f054aad8f5b21aca9" name="httpd-devel" arch="i686">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="0f08a08ac30f49ad313f2b30229aed8921d2ede20a632ab5860c93da015a22ab" name="httpd-devel" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="8f4fc8fef8548760304f53c5e7b0e184bf36558abbf97fd30f3b5ff4afe8cad9" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="58ea461acf7c99a61d31613e3356b30ebfec70699a8e2171390205b44bcda381" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="dab7f7401639683d966d937b12448247b90f9fe8737fd03c361bafe9f1fbd554" name="httpd-tools" arch="i686">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="cf446c16b32d88b6112e3ce847db91843ca471f08ad47afd62b17e3a4c55d1df" name="httpd-tools" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="6fb58953fc69ba8c20f7ec9c467f95f72df14b90dede599faf8fd10ff3413d4c" name="ibacm" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="4142d060802f57e5b956a4ebdd79a116154d8c70c646090c4303f1039a57ddec" name="ibacm" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="45423591badcf3deb3fe267cf09d9551877e98e90db846f6b66558ad82bf6c3d" name="initscripts" arch="i686">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="218bbe6d3b52035045f10c1a677856429deac05b16ca65418a66c5e4b3a417e7" name="initscripts" arch="src">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="26cb07ee734d6a8b1caeab5cfaba05a196d7800eb4f1beb98b678b968d30c79f" name="initscripts" arch="src">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="bc35f83350aa3462e1645a7f5183a42f66a189a26b6624caa6ebb25c823b6d39" name="initscripts" arch="x86_64">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="78c6698d720640103400716fdc12a6a59f309e76b872b31de0141d8b6442c719" name="initscripts-debuginfo" arch="i686">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="47a91898475643cb60f1f1f07bf2a40e70bcd4ac79e1ddb87b0cc4ef5f382dcb" name="initscripts-debuginfo" arch="x86_64">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="dcb33dea5db7b4b4abd9dd6c44f44c39a4d8878f66048d81ca1c753e155f873f" name="ipa" arch="src">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9934511941152106d9820b797ffbf9a20b05e7fbdf705f74350fda039ecd9e3c" name="ipa" arch="src">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0abbbf2bd6fe974a2eeaddc628afe37dad55da47e40e36f9a7d61d0763772580" name="ipa" arch="src">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="18be160588e57ab227044091fcc8ec1b259aa0c3cb0508fbba785fffb78fa036" name="ipa" arch="src">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="fbb64a4b6225d8853b410981a4cd3c3e342cf761b3b38e3f90064f62dfa6d368" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="66db61091c7f86fa3666833e23320836f877e6646a9128aa03123f429bcc04fb" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7f896d4ffdd226c3a16a6b4dbef85a8c9384630db9c279414201ef3039494b6a" name="ipa-client" arch="i686">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6f12531f1d62561b984d823b69f9de434c3c04e6003b229d7242edcf60f1a1a9" name="ipa-client" arch="x86_64">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="78c096c7487e8db3e402987e081b3fea33178fdd7dca31a2935a10f087137cf5" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="fed08a53bde14845ba1e4409beed85697b530a3e05cf67c72fb37a425155f132" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="66369e1c26353b021dd5fc767df452a3327992044d3d3f807f793915aadc0eec" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="228d84dad6a23b248c65e7b98154383534e2b09acbe34d46a8e3f691ddee005e" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="73c2f67a39891e6721f66f9224e9472eb593baa3ca2dc0c48506b1702735f3f1" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="bde6bee55cc339d390b5e2bc73cee81bfad4450389f441d5636f28db79c5a3d0" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8be892a2e1e96e8f2b812cd631387b54d184bc0723ce6d896b2076cdfb2b6bf8" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="52d5c8ac8665521dde90c9799d44ee7c843640c5a642a59fd4a61e72fcb78066" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7e10d8960de97c8c27d3b89eef97ec02431991892b43fd97a39bae686d63934b" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e38d934f6809351191594702c5cde061b6e2bdd50ee71119071728c76b2304a7" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f3ecfe09bc2cfcf8dedbbe52d2fcee849dbaac94eeb26cf6e270e2f13d670d0d" name="ipa-debuginfo" arch="i686">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5e4e406d9cfc1e56bb6cb309f204b2ec3365e81dec13f9e7a14480e1c52c8f10" name="ipa-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="41cec45ddf0b8fb29cba1498813739ed14495698393293c3ccd1c6ea57c17e97" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="241d37ae62da8aa2ce06dda0ec05ef9f221c87d0ea245e8c2e1c99833fa848e7" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="556010bd68d5085127c7a47d84c46006e5a426780423edc1063857a0c01e82c8" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7f87d1f1b49eac2315164ae5a4b9b1168f65080b210ec9e3b87b09d7492b5cbf" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="335abebc7465e41740f54cdedb6c3b34620633273313def634151dd6a59778a1" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2d4f48b201253df2d3199556efd626a6d1730aac4de1723a7619cc527ce928ca" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c1f7be89ac987714287a77c7f082f40d24466c5520759037271f81d6334aab83" name="ipa-server" arch="i686">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c7ef5fdf4bd39e503fc9217e582831c3df5c3433bbb7deff577f38a8ea849bef" name="ipa-server" arch="x86_64">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ad056c7653cd764db5c32906c1fa6800a0b09a300ece6ef878a44dceabdd0ecf" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4cc8f69049bd15ac3785ad9529cd7f96967e0c58316a01cea62ed4c35f03b573" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0ae83314c35beee256ebbe9caeca2eaa13062cded8696ec1552ae83adccc32e6" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="812dc1ceb3dd9bc7a49b1d91f9709958c14e88b474edeba0f8871a7435fa577c" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a5aa3663c90444bf013a0fa036a15d61a0c6b7dcf6e8c17e3198cd0b8754f6a1" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="bd05479ce37f3d0a73b9078030af0b9832da7b8c9bab8ed6ab4bd8d4bf1406a7" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="12f91335de94463bd6f448b134b2a16a66e06ffead34069d695e0790673759d7" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7425b22a4961d2c5d5b0bb8c745be636dc11394a28f09eb2899f4ea8f4852ecb" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="69880775932fd268c46e8c8a4e163db79976377a3540c695ce4650da667b9bd9" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="83c8e787387073693dc380c5d8d4c494ab7a48ecccd59b0d59321f15312f3fd3" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="46a3900e0ac63445ad5a677decd98c63a27f8a09fd06d7e234494727e0478eaf" name="ipa-server-trust-ad" arch="i686">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4069dfd6289a46ec51b8a2df0fba6f694be3600763730555340253917d76bed3" name="ipa-server-trust-ad" arch="x86_64">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="0df5ca4413434795a9265fcb5e2e41981153ba2c888da0169765a727091fa060" name="iptables" arch="i686">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="e9c2b05be02c9237deb2c020a356b7cae7d2af7b70d606c6a76c9565656f2685" name="iptables" arch="src">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="9c50a87c73cae9babfe98da051e640be5d65cc159cf2744995f88b5e0bdd6aa5" name="iptables" arch="src">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="e635d369401ad24bb33133c86f723a0071d52909d9aba366939779c1aefc4bfb" name="iptables" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="61dc53511c2bdca5202c2baccafd2f2b6505f9bf4127375025cc6d8f810f3063" name="iptables-debuginfo" arch="i686">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="fe3983094362b2e810e9eef1b752db0595024e40b396d36cbd759d6aaa8d33d2" name="iptables-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="496d3f91906bd939631548ca459b60a073bf28743fea452fe1a4ba690e88d721" name="iptables-devel" arch="i686">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="e7f7f9e1b979ec3a2c4375aafd53fc9d1eeee9fd37e6c0b858479b21c84e4b81" name="iptables-devel" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="565197fd38d51f210c2ee51148b9b71c1bffa867d3adabf97137e357bd8bb9d6" name="iptables-services" arch="i686">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="fd64703a7e27c131d130c6aa90824705c673ac22a2cebd40cf46ff38e1d5fb9a" name="iptables-services" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="9cdc5cf571bcb02a9dd5ce3942d383d7d47d53338a89ccd2845609fc9f6b24f1" name="iptables-utils" arch="i686">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="40ae2c28f48385014573103638f4f3f83a9d0c29140a28b2cf5673aeb321be10" name="iptables-utils" arch="x86_64">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="fccf487732123dd4dd322d7d97bebabec565a92d5fda1494f0f5dfd59aa4a0e0" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="70003787641b4182fa812ea7a34456a854bc3b4f3ece6f2f4af3faeff674f7c9" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="535dac60f5638a972c529b6d271258b15a59bf53ca3ab55510893e8c43978c47" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="ca1041fca1e93fe8cf9e18e3cd9b6e3df1b1eb7f98355ee96cfe38a85c93c012" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="a3a26b93057aaa79cf368f8c452bef7a322d91d214f3b95eef62216e9903e340" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="dcf9cd6fd9150e4870a6f432958d0caf45f34c1fae5e3e5faad56772a7bf52d4" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="317271eced7c0e76b16197a257e597331450f533766dd037c3a52915ecab1420" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="6022191a7a07f4d8b026c894077aa145a907da26b5f5a256956473e6026cf348" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="c6cec36b4554610f1e34b8c2b8f52c7205ad788cd167200b7371d82b1bc1080b" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="8c24d979249a1ddc0ea5595b27bb2db8ead7614ab1af6c3628e90f37a8fdc2cc" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="47ea81c3cd4d4e016d91ed2b5ff791c3a37e6f29056184a0b8abe6fa97ba72f8" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="7c0cced0e7d7028ed74571f510d3247ffac647b9467ded6d5a753f09e03e6dc4" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="cd712f52153e40a9a76e315f3a2ee7886233b0bcfc4a16811931cfd7993bcf40" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="c0299bcd334d061a9ddafc5a626ae1e7cc90b27005ff6a2eb69cf2f2ae31de14" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="2bee8d29ac00337ef8d1db5d52fae165b7469104cb7edabf9093fc4928394944" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="49ea115adb85dc8fd557b74c2cbef98a211fe879785b8e2482bbed561a765ea9" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="9d5e24532e698954297a641375b4034e2930ffe6ba868687f674175a288a0101" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="efb81649a26b8e9de5f4d28b90faee5c9f063e3f79bc395cb1fa81348b50fc88" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="61aff96cc10d97bf3c41c71ab9f5577d423de6b7f0be6a312302dc7041ee7894" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="bf7a514e0b626d49ddcabe9314502f4fb63b1b4f24cb35e2d987b8484600d7a9" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="7de8ce2f19d01fc1acbae2e08e084bdb8843c1fb940dc9154476e6f44fce4613" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="c410a7840ec7166b53eb2687cab8e1a6e38e9905ce76381342340c1eb6e8cf55" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="5ef16d503dc3009ddefad342abc563d49624ff85ff28e99296104bbe4d9c2313" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="110e48aa805f3b04034df5783f87aef7444c9873905000a8fe84f90b3e587fed" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="34b9b16f687df8afc78e82fd5a7c9478ce4ca92939631028cb811b4dd1dd245a" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="eba0a3e86faf4969c5a37b28c0fd5f693c309d29d82e822e77eb7bc0902687af" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="96022ac82657ee01fd4c083156e89eba0cc328aa02d3891408e1d9ab2d496685" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="c82104d6753fbfc22b46f74fad466ad8a3204ae1fb97994a5d12760226cc9f94" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="868b0f68e1be431f6a117cacadd582ae406625d602fa7f67b32a7ac15ad244a8" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="f4e8ceb2a0c6aa5b1bcb0c3480d9d877676ea9fdcbaaa39e2f5a779dacef92e0" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="8b806cb2d6590642adf32e9496df580cc3efb70e3700a98ba06ea0f40b9e5d18" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="741a9564bd68bdf3fdc6046e47ae503bd0a3ff1e6d2889973d48f69145d08f8a" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="7a8e58cc9be155250c182c2a0a38a7e6cecab679ebbc744ce50a5362ee86d707" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="865001d96c0eee1c5336dadf46f7e029c53cfdbad3c547372cc046450d151f58" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="10b4313d74ab5d1f2a2c31be62132f110606a9b938bc0f7aa1be1c9f79e9d17f" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="b9004f09c56c4ea03b50eb95cd06c7fae8190950e7ba1280ff7d69cfdb549538" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="d68c144e10f8ecbe447183720471cbee324d7e341bcbb03b9b994d11761f5f5f" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="ad772ccec208fac018cc1328d8397179e3fe4403d6c808074d596912a74c6917" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="4a3a5137408b1e9155989b0b49e70ae126a4b0b6cae223abeab692ae1f4e0d82" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="19cab6235a2564227ee178a8d0f187e48c9265459f92baa0692c8e6aff509dfd" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="a17f44b35f3ea16db779e88b1a4b4e29278a91e2f4b7d015b28bd6789fa9e64e" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="062898e57e6eb8f3e97c48e592f0758d71abc0433b4f99f272f949cf9db719e6" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="1bd17a51e0ad13a1d3024d561ef59c766b471ed624895e160bfe60561a7e7acc" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="8b545d3e61acaed2ecef9f3e589e59b96a5eeb320ba8467ff6af51d130d5b95d" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="b2161961bdb4c8817f6267b9ca262bde3cce80b6dd1cda2d8ac6cc45e291ba60" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="7d32e0241700e949e352dd5cfb6d30690c19c541ca99fc33a459f6a7f7512bf1" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="0df97d729907066d2dae2b26c0843f250e2b806d2a68c4b16caccaec6544ee08" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="08f339587dc1ae0b542d8e1582f00bdd491a0f8ca88c89312ddb0f8df733e476" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="8f90d80616a8fb0db0bbefa5782279ce164e0302db6eee647e722978e0d71f53" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="d1bae928f41d18f27ab144d3bdcb851c7e255482093a1ea0197d8aa1811b3a01" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="a96d154583036ee7c9f8ad9359d2c75156b609f6f1e4f6d4f4000c0fa54ed0f1" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="2625275dd64b0893477868f11eb75c301b214be7a63b380645fe9938a2728d08" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="3dfd4b521be130109a85d8bc6f905d18b6c0155b6e1e5471fc0dca3c5510a2ab" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="2fac585cc6da3011b5095143c4c66b042b63ce00e5ecd0151107ba44dbb717b4" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="c87485d3e7401c9c8c6083de9419789414018fbbe7b6aab35f235ff34a353663" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="aeb594147fb7e977b41d59325371cd02dd8fd708053db2b1e2f5ab5f2665401d" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="13c19570ba34e2031b17c33219101632cd196aa1fd073ec1a2afd771e40edf5c" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="13cf7a4f6022c009b29e3f50d99dcf217896038d912aa8b8f4a37eb4f8291592" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="739ae5fb878f089bab41c3f57a33a8fa65d64fdaf89972117dad9381ba2c380e" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="baa83b2c0dda9fd2db3d617df9e8dd03b0bd701056af685b48764d12e5ce0bac" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="80450fa48bdb6b0cc69cbd2da025f24e4dc61ce08c1aff864f04855dbaae017e" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="a634e6b9b4ca669bcae6124dc43e658d48bd044498750a731018fc2aeb795d65" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="8dcecc50896efc250d94fa57568642c1bed2593ee725b746c8f5cbf2aa8af027" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="4a2a84bc93aa7d452ce04986738360bba643b2f40ebecead6c1b679509f08214" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="f22190237be98526675bf2cedf3b12066bc5d056b34951ba7ca5f52fde04661b" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="7db73bc2b33896f4fb03e7f998c3022ed39aff947043482ea5b0f1a2fb296424" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="02ddf01d71fd80ae52ba858730c5b6e368f6e956a736fca08963bbea00323ff2" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="1b7f28d0dd196d659a368315fbe8e741f4083aee9e8fe047aef56db54d620288" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="83cd59dca9ae58db4b9530db1cec4b3deb1fdc84f3e379b6ac8da402aff66b67" name="iwpmd" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="8721cb136d67a0b31414618d6aa25bd17d61e1fa9a9e350597d7fea9d9ea427b" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="9d13b0c83ae26742681a1cffe038595b6fca7d5cfcd7c719c5247eee741352cb" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="ea736000780ebb77bcb83d6ba2a5219f8e9f8658125b5cdcb5ea1444d47a8770" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="be95a9d669a0e6c02238f3763a8a3dd8698db5f1274329d696e7ece092e8f604" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="aba9786c5530ecedff0e05a4edd5aaa3080b5e612c78e60ccf8eff62455ab6c2" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="74c30d2a00af7b413a82332a4a29fba25814e30e8bdca304c96209cfbb6e1363" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="fb1da0b7ee4fb246088a463ccfd2b1010918f11a1485821b77afdc64a3cfb53c" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="5e7052f2772d7463492ce02b6196846994520341b5a4a673c15ba267b516f2c0" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="f8058bd3944905ac74f5341a66c5ecb9f812fc5399b4df7d479df0453575e257" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="4b14f4ad856e4da2d3fe57c229eebee252cd73d2ac7568ee9d633df208ba24cc" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="d97389d8d9f338dbc9a23b75010513358447b1b0f7324590fefe943b73c2966a" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="84535f2bdf4880f522e78719eeadd0a7d221bedf413844011f03c526264098f0" name="java-1.7.0-openjdk" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="5d517c10ac75dcd5fe3095847b2bb2a2dc998599b987a716c58966d2edec82c5" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="bf6e265e2dc9b62c8a988231d0880e61ef3de334dcd40068aaa8073763973b7f" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="bf55ce0fb70d462b566b6ca9f35c2678a4bd7bc7471df5dc32151c88e5820574" name="java-1.7.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="c52554e3cfac9be5b3415df38fd02c9ce9dcb71197cfd623e50c3d39089347cf" name="java-1.7.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="95ba3abe975fda2645dfe6ff304fcc73d1a975157aedfa2b170a5b87ce18c2e5" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="bd84c486b453cba9f1f6a3b98002dd9d8f685d0c78874a3cc8a44118158df398" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="0e337ef15363b27c45c689fb3bbae240af66e431bf1e21294da29ed3253d307a" name="java-1.7.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="e00a0a9c95e00cfc9d8dee2ff128779427c946ef5e95c32173259754522adac8" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="45bab014b9683ecc57a1ccb18c2b47c4a40303b28bd30ec37c57fea14d9bad24" name="java-1.7.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="a01737fa23b2babd86545cb24132e07a21084c4e4fbb2dd4be248cdb32a12c4e" name="java-1.7.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="ae08b92e0689c944a453aa36a56ffe184e5cc07799071bc6edb955c54697552a" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="7e0fa7c8b86d13ee027a587ce227b82eed0c4ea4f71a3c462a59cf86c1c53501" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="b46c6eb8747420812874f80667ba14df65cdbe6a2ced2f686e41e0e8dc63c53c" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="7d24bdec854401ac1409f3e11ede4a1a09f8c1dac6f3c286219a711cdb3064e7" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="a3fa1f9fa1eb7743a0480933b5e7a4f6586c8f0e529a4f6d14f8335b6a9a225f" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="53aa827859432ea6ba7c6dde7a56e387ea0e178aea92371fe3417d43a3351edd" name="java-1.7.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="f31c4b9a619df01925d2eb96537f072e8ff389158b98430dfe2f0238b65d3b15" name="java-1.7.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="6632d8a92d0de20a8e23474755d97d48d7b8918b72f6d0ebd961e457ad0db1ed" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="71193dfa31a7329133e18fc54320213ee8d9024e4535f51a20d931779ac6efd2" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="778148c554ca48de32e3954b6e82ac4a0cf8eef6f923b5c53d984176ce5bd22f" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="0b8fafdea815689cfaa0817ec0469e1fb04adf7c335b1c28f276d349a8a2c0bf" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="18d561e3a5ab60d7495a43f86f442af14ba2c46a44d73b5afae2932acd28c6b0" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="65853e0a61390661cb79e2d290c2b713b8fe24b553a24d9bd648210eddd8daaf" name="java-1.7.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="7ac13a41f73965fa38428ccd2d6abf482f953221d71df7bdb549fc0fc93aa42b" name="java-1.7.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="4d1c43c0fdb5eaf800cecc605422656627a0eb1931cfc0fdd76e126a991a99be" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="0cb911adf8b201cc258e151738bf8e8f40b9cc4cebb106b43edb2faa8570120f" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="55fde797646a5d155414f4cbc55b40985f09330186eb24abf4dc4cb53ba71ed0" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="3ad62692240ab031d0013a5393ca9ecf1631364d6043eca65416bb28f456c66e" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="2084c98b99431a7cd01d71f3bc94298b90a65708a1dd0b588e3323bed95411e3" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="0fc1c4bfd02aabf82bcb6707fa4d415e36c109c9f736882f8e763a71c16753e1" name="java-1.7.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="416b9e284e4e78aa27a6c991f2ba76eb4c3d16afbdcd228180b6020222d0054d" name="java-1.7.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="13362f3fb7dd576bda3509fbacaf60bea087298d4a8dbc5d110b046747208a27" name="java-1.7.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="6b19d5629024f85fa9e95ae7b16453e4f5e4112edb974c8065975c48428c9983" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="902d527ab4f64d7fd69067c08efde50cf174093ad295e6007f31ec83ed564b6b" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="46cc47140259ec8e28a603b51afa1e8025639ba6d20875b1abbd555579e18249" name="java-1.7.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="6b23662628dc6c58e7085705581efa17448fee52175c3f41359477d9fe38979e" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="fc4b207e4ab12754075c03316148d112d897e5aa85cc59ae8b025cb7f98fd28c" name="java-1.7.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="08fc7d241a27eb48e244387fcf49e4998dc2250e716d1c7f31b21c63e5cd447a" name="java-1.7.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="e22a6ac4cb39b54b93b1b6cd26c736963189c3bdeb21f5551077e99ab5531934" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="e2ab41af2079b93d249e26e33894989169cd61a5b80c8d4bf3995ebfeb3ad84e" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="19491d564a9f49b48c89116a8536238cd0410b1a178fe037bb4be669e7c30ac0" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="95358cf954b380028d45450e6d93565952ad3c968555e4254399a2e440b0a689" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="ea9a469907a50678a15d542f87790c2cc344284464e4001e6c275ac2d232cdca" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="247a757d3148a67c3801172b9a48c9d0dfd2558ef960ac0dafb5a495655699e6" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="c217086a3d0fef1a2fbe1efbcb418b820b06806dc08d6d93b1afc59e46c934eb" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="8a784a985804c986d2087fdf08f9d9b66e65b84eee605f4edfb82ac27fd53991" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="9082c05a7a0f2b4a390a1704b65d817bc7421561d7405b7474b43523b898f768" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="deec51d3baf8c6ba8ba985919f423002b2253e57ebe118469194a402c0958e5a" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.5.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Rebuild with RPM optimisation flags disabled due to issues on x86 multilib
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214405">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="2db614835c087cc5b0048bebb2de5855f8ddc46ae2c931259e4611d06ffa2c36" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="698fe5131662994991ab1d9fcf6a98e384f63a6552e9ec8d7f9e9e489b8c6f33" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="8ab4840f65becb47c3fb8062cd47b2995d65d07b8a1859aaeb9bd770d26b865a" name="java-1.7.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="6f9b8b7cf555bfc2f28040b604c856b7d97c36bd5794bd4e6e88bd004d5ae45d" name="java-1.7.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="dc373a4e8399eb5115d307cff8c6f015d3ee3aa777d3842af9e13c8b11c67152" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="0ed3984b2023028093626504dcfb89d87b1ee4d222624123729d5b6d70e0feb7" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="fc970ea1a81df2a3a19c128a2d5c6f35c212c28d8d1c4380230b3611ad7935b3" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="7128b8b066ae2501f038c49b05e3dd7e94221d17fc714a7c21401288d82c27fd" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="9ec2240aaf680ee78dd1c55bf5af08cdcb7405f592290c53cfcbd9b6d4ba7326" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="2b5821c9983cf0cd7ab333c7271c98f412297ea680a554904817fd0504fb1405" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="0015fd4a198563ce65772efcf02d740e5366d319c45876d75b1532c99e7dcd91" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="28dd3dcfebb9e02f5884b36eb8242ae3b1bf544f12f99f9915162c63ce4edb49" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="28594245f50a0cb3200a21b1a6958da808a46ecd73fdb14967391ced5c15043c" name="java-1.8.0-openjdk" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="9da319e8059a36250a7dcdc966210d9a88e45e8304ae3319f81e7ef1a0bf837e" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="2d64b694aa16eeaad47d358f4d940d3a0f2e3088bf663a9ac11db9e74e40c9dd" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="88650a193d80dd9cffd19b28b76982644cfefd88125ea422ffc66c72424de128" name="java-1.8.0-openjdk" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="12240ee789e8d47a20c870df885c08f0f6578da0b63a0355d788f602fac2978a" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="84c83185472a18d566e571d0527b922896fadf64a3e8d20f2c5bed13e653a374" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="d557c212c7a1a0d429c87077cdabed285715cb82c8d688bd0efaa5dffec1dc1f" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="162b9683216682ba97eab31e4700258927b09c7c0fbb10bf88a086effe7b55fe" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="6eecc833cf4b235fe2c7378ac35be33fe927ae1fbfd8216dbcd87e1853d1fb02" name="java-1.8.0-openjdk-accessibility" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="0c26f6627fa561c2b0742025023ea47bd4d139529b30486e59c311b1e84009b2" name="java-1.8.0-openjdk-accessibility" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="337afb9d1d2ef405d71c9b2d3d5280a40c6a03171852924d571c642e3ad14cb6" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="930e5bb0ec74077a0d36e22d2ce1488140b92d0a34389aca085eaebc86624a57" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="108829407fe1fc1df59088b713023f6a247dd75417b20cd6d158e28aa841fa86" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="ae9d19baf41925f878f1f536e65ac915b7b053f1f0503452688a00447e7e6cdd" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="c205342333f0fe2137e2c7f958d4d6d4459edc5dc1e15851430575a6208ffd51" name="java-1.8.0-openjdk-accessibility-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="b167f1b16feb7f397a860fce533fd3c41fc9f232e1836a5bff3cd144e20ba122" name="java-1.8.0-openjdk-accessibility-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="3bce08290762cc61409fd3d98245a06e3bf3e4601eae7c5ce37cc34c321a1c71" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="c5cdf078583b7773f1092f4b836bac82b51a031247be86afd3d0b4d3b20f5835" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="be879217ef228034800d3b18a17b560cfe68cdf1e3ff495675b883d569bed697" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="0c227e532ec62aeedf08703174d2ed8fa6b4fd9168ef1590fc6f4440fae9026b" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="da3ec8b646eebb9f49f4abcfcd97f165b402a14779e058be87e94df7acc93710" name="java-1.8.0-openjdk-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="7e5718f5ce9239eaf29c48480572d8832cf94610b9c946b187a1f0f998c07a72" name="java-1.8.0-openjdk-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="84495cc1a36b2877f335a837cc438c23d1e23341b55609602ad5b468630a80ac" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="743287ad26239df98c38e924b7e98b80206007b6e45318364dbf6ef413a0d4b2" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="d7e30cc365cbabb2427fd47b101b79e2cd11b37b507d5d1b21d903a181fa004b" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="ba74c5d6c02f3bbaaa8464e5ea081bd87de0414eb50007e46283c8f0c0019b29" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="4940cf0764e531bc6a4cc283145be78c552d21396cf0f0c3d2422a7e678f8405" name="java-1.8.0-openjdk-debuginfo" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="1502dd8a1fc088676b3a51ec5d751b8c93a7824814b56427ded9b925b2a5d04e" name="java-1.8.0-openjdk-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="c316c30e5091110b476ccfc239bf63d754623796b9b5be49ebd1e6ae2ee347b5" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="62540536aa63e87c880b796da8ea027ba451cb818bbdf1462ca2d1d446d9d334" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="cf4531d9cb686ef474b30fd0f9d57bdfba2fdb54ba4be43eb985ec5caf94a45e" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="2cc4a4a0aebc6365ed2a8ac9b3e3a900a08c8868a5f6e338fe8818bc61d7af4d" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="4536699c0f7ddd1297e9aef1a6ed5ed33550ee616a5edfe86337d8378788768b" name="java-1.8.0-openjdk-demo" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="9304aa686589ce3c8819e5895823d611c46b79aab429f7c3004fcffccd9267cf" name="java-1.8.0-openjdk-demo" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="d268eda39b0626e2e52c978bc35766a3ce00ba48ccf9401924c214822b1c3a94" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="49c24f1e76308325bd5b5dc18211e4a4a69fe25e2f1af99d4981a323ea9c6447" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="c3dc366343ee3b63eec540e3e4bf2e857dcafa78ba35b6554c2886ed6a2b7cf2" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="b8479c1e4f0e8ca4eb314c1a1551a942ad153fc68c9615e0198409152222a85d" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="b0b25835cd99a3c6e3c227c262c750c04daf00935f01bad3b66274a13ec46d3e" name="java-1.8.0-openjdk-demo-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="f01230f81601ddb95e512c759449b5f3c13c1195ea09593fccb1c69f4a926b64" name="java-1.8.0-openjdk-demo-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="2cb3b42819266b069bf335abf0b1168f5e5cb57c5b79ffcd3f1e98eedf84d683" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="a2d9bf3ce7cfd8d421998846043a6a766738afaed1eb382c680f6d89b82897f4" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="0a86f0cda07a15c04f2fdab42bf839944d18a3f15db6228aa99188a7929224b1" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="192c69d999a9329dac5034bb47729cf6a69878f358ce013a1e3b82b68d1ae464" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="da0ae8c3a47aa1e98f4656bd52917d52a8cd91d2ffe482439688d4468222c228" name="java-1.8.0-openjdk-devel" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="7e91a18a60babe382e1f2a41129a9bf7bcaf2bfc4f2286f0beed1fe8af8bf61c" name="java-1.8.0-openjdk-devel" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="ed9153c9b151ceb674a959276a4c42d0ae90fdd35a809ebe2024671b4570ac03" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="f4aea6ca14881465dd9e83f1c97a160661b0ea02848d3d2b77c9ca8085ff1399" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="282f573e5d71c7c900e73984e507ec2a4a245a57f747bba3566078e20d9fa788" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="b42c475817d2485f432aff2e8df2c7c0ac110aad38214fd473984d239dd1a139" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="8f60e2e30f08f75559d6e4abe71584ad327a1ff97a87d95e868b712a61b40879" name="java-1.8.0-openjdk-devel-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="9b96db2d5dc27f8d333821287ac3c613e8223a202bb3b22ec8b25293f3cdbf99" name="java-1.8.0-openjdk-devel-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="6e69c94ca051caeb526cdb9c9fd496b754f85dae7f82e4bb3be0d76a49cfaa52" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="95228de5196d0bd75c812eba46246f964904c198c2a9794e2d67bfb230063483" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="38785d93f5b52c2636f13e40c939352676bccf314d4fa400c557430aa61e631f" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="ba3753b003036f877d5e319a94e3a61fbc32318b60abcb3be200b3fb71074a97" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="32b176de594f1d32ddcddc7e5f2a0a483810abf2a53f183c56476fdf8db74546" name="java-1.8.0-openjdk-headless" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="e1a6534b0c8b3218a92269a022b85d25c2d2ce24d4dae57cbbbb942058c335c5" name="java-1.8.0-openjdk-headless" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="e24ef3eaa320c3571b2c22d725e0abcc70a52df7ff965c9c32f6d25b53f202ec" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="66e533bab9149af7de76e3aed5133a09f2a3aa2cdf6443938593aa48014be754" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="afff8f4a5f8db3f0aee791777d84e9dd161089458dfcbfe35833fc3c28586d42" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="8db6a6c517b60c0c9f79f9303352379a228e8f7a4cc48022217906fad013882a" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="06e7529e69160aacf8018a0738fadb376a5538538d5c02a8a9ecf69ebb03257a" name="java-1.8.0-openjdk-headless-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="09e964536dcbbeada86dfe2aae7f715fd648bd5800129a3f72e0200e8f7a5c54" name="java-1.8.0-openjdk-headless-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="6e7171480451398a0096b31fc53f9a286b957309f67d48a3ea3d2d5cb1547601" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="721446d2f384466a633f63a05009d801f524278ecc46d39a26d852d47e9c5ba1" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="42b4847522b5feaba369c6e32046daed8a9e017e26634d7dbc98102bdb0783d1" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="9bf60c245403193f58e35d68ba589bfcc6050d98df17b91510d8f6eb7954e522" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="735365aa162fb376a12cf27a0aa3c863b9974688d49538de7ae15e1a2d615ee3" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="db3511053dd96f7cdd914ccf22082aff1ed9302e7fa29941f9291737ce76b58a" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="b85fc383d23e08abbc382bd231e46d0f7794127004f381a20abd4a48cb61847c" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="78ed2c1606d754962a54390754aeb2a046e8a3b109a2eb88134f6b9055dd2f0c" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="8a75927f18c5328189cbc1592e074662edbcec80bbdf92c42ae9aa3912fb4978" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="5596c721c8453acead7994f836aecc556525567c5595ecd6aef5bc98cf22630b" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="1e96910cf9b9bb0a765a81380c56bc96c85835d5faeac4629454ec020e43e02b" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="40ef723b6b44bcbe5443fd426aa1727524f4cd664231689d0b5cc8bed3468ceb" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="06adbe9487ff3b15a374381427074f4bf4dc1b4dc981760b20a553d9e93495be" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="6758df52d75a3c31e803e5565402a65b2f77a8af5075e040695f5abdc1cd6fe0" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="3bcc4affea0446d887af08f72bfcfef4c492dca91f4499a7e53d8937b04cc528" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="9a097d3930430c59257fc0631eec26349a438a531788159b4843007cbc6f5f00" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="911e532938b8837f26eb65479fc492dbec574cb840282eed6ae5618ee7f85e42" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="d449ff5ed84a2b31602cca78687233f0532a4ee37bbaf2dae6c2f7c6bc55dd02" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="238348c2e1740d3756df1b02dc0e5edee28f3e5b60746f7a582e196677508d9e" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="8972b457fd2a2d4c73a50e7efd7b3e85d99ba5a9474425d37af217862d50f5ab" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="e00162c4c041f08d827f3a29a5dc62259ee08dae6152e21272b525dffaacc6ee" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="52c24ee06aa3919ebcb33f56d2edb524ed1e3e739f377d3c5c34211c09b6f2e3" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="487b31c7354e79bad51bd15d60d2a348eaf679fddf107e755e9281603fedd188" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="8e0e6191d8efa5caa65035e27bee5b7854126b6222a6c01ac2f791c8a2ba598f" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="fc28d54f86753176693332fb6e236abb2c0381aab427046e59a5a489242d970e" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="96e9d4348eea6aa634c226dd549060ac7d2e95c8f3681e987d9a43f76af89fc6" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="99fb2f0f1141f1dbea5eb8c1d7cc9e7d9b58c4a961deb58c419de17b5284f976" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="f8a62f25b6192d71b181880915144ca236a0f1b454c69c77cc1699a836b541e4" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="ff00b7b3801b9e2ba7d802c1b68785d306781848f13532166974586054279aa5" name="java-1.8.0-openjdk-src" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="1c1f4f64194d825e1d718a4aab0ef9fa437a3528a89153345b8a5ae021f22cc1" name="java-1.8.0-openjdk-src" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="84aa376c7a592cc976d332cb6f581615f72c57f9ab73b28c336165514f65619e" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="3196531dddbdba92638c7fa4db0f8cb9ef88f9062171c144bb994908b6758a1a" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="7.b10.el7"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.161-2.b14" date="1515758400">- Rebuild to fix temporary loss of RELRO on ppc64 and ppc64le
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
</package>
<package pkgid="5a2ada301bdb3e749169330c761850b7b5470ab2d60d4159ae98a7f3720f36d5" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="9ece9198ec4182685eb1b28df2137d8d970be3d334c1887f4e52c86a83014bac" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="f76829597d04bd51c06fca75f5bc2c36c521c8daf1f35ab301990c948f59e188" name="java-1.8.0-openjdk-src-debug" arch="i686">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="6918d1c2c11e01bbcedb6fbad7c2edc9085b3249c033423ecbf421dfc3023349" name="java-1.8.0-openjdk-src-debug" arch="x86_64">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="202a7e05c18c71f500b3caf92d94153b58f3cd0c0b20b46343e7a508ac3b2d49" name="jss" arch="i686">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="81de978553a231bb696b5fbe7b551284ca40add0ba9f6c2f4451401b4cacac3f" name="jss" arch="src">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="0a9212d64e81ec5907fb5735efd6d41641a8a4f717fdca40e6e49dae13b09ece" name="jss" arch="src">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="cb941967db33c890060211f5464ace70cf42d7d741f13ab537afe750ad3c98c1" name="jss" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="41c1cafa4d138b736a907130cfa563a1ecb218bec219fe38ff03eb218aa33085" name="jss" arch="i686">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="9e8287ce861df6605e29c0aec2b52925e800bd52ea318c7cbd96b5b062ac0d61" name="jss" arch="src">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="849d35966c911266e7af9bdc95d9748a259aecc603408198372c36b2405b7767" name="jss" arch="src">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="ab8d0eb7c00ec6bc408d746d9a8f9e32346647238627214f2ea618b1de208f7e" name="jss" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="dc022d8e34ac96c1842f2e2c9b458259e1495e6046b8d697b7b6c2067edb3be4" name="jss-debuginfo" arch="i686">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="e5232a835ab24e011ac4c38c8fc98a5f5a397f391a25c3303cacb81aa7abab35" name="jss-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="66ac5e09b67baf783bcc9fc86ad6358c1cc8df31d6a0d2eead090837df1de232" name="jss-debuginfo" arch="i686">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="44caade15df945321facf251b0a82151b26d011142aafaeeb9386c124dff4694" name="jss-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="ff03ba995abef24a4e689799ac094d42c2271c9a5c6ffe766af0f72b42447bd0" name="jss-javadoc" arch="i686">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="61054da5d40ce36d49c547dfeb641af4b9b0874c10ab8ed3671ab91bbf0fab84" name="jss-javadoc" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="d76b125409723e44d0c6358af51efeefaf34581a9d4e8cc7418b9064f8dbd129" name="jss-javadoc" arch="i686">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="3cd14ef252c5588d44c968d40f19067091461fd31c6d7f508e9ce56a06a294a8" name="jss-javadoc" arch="x86_64">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="b4caa02b0b95974ddf68d54713c07ca3fd16363028a070e5728d27f0fc1d8031" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="546923e271d1d058eb8c85de8833775c839f4af405db4e7b06e65e40ff89fd96" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="4f87df64660fc9ee5ab854835646929c7786d7de06c2a10217fd4b74ad024b56" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="bceefe0a559bf11a790a4b1448c1219be00a8975b41df8b14befe1f574df69c8" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="3371182840758a72d174c908ce62baeda122b0e1c4785236cebc8a27089fede7" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="c12ec407b2c01562928147646284eb675f642d1347b33caadf6373b0fd2187b0" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="d0b203682002adeb56faeb381ec1db4b351a543213a5b6dfe111e6f393d690a4" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="bc4a2a167ec08c2107afd78e9bfae34e272443e789411e191c5d2b85662c1b08" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="0072fa7537500c7139130e59b90b80c12c56b1763957361a90b7c2528eb11f66" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="5370be78b8a696a24e0dcf4c40a70bc4ef42f5bd8f8914fd3773134ffd2efb99" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="b9d566b8ddcceca30254e64123864a91116969f546e2d05d19bfe7b00d476d8f" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="12a2f9fa7243b0336a2b62fc08eb5c7ee0c3fe177052746165cbd110c52093e8" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="14bb03cf042a304f7f6b0711be6cc0b57c0b794b12d0e7a88af6e2c90583a1a0" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="e9dd7c6302b8850a4f5c4aeccf0b98bfb1e9ea31b1265761d555ac1249e79ddf" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="1978cd3bb1a4c764592c0a9a01807d1a672d083dcbde6395ccc1fef310d6994b" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="0d6a34bec7f5daf5ab84ab86731e96e33c9f3a12c4d3da4ff6edb80b11bc2bb5" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="0d951eaddc791b0676f353a3fb6ab9fd17275b284839f527dff835ecef103c59" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="3a07ead55e3eadc635cd0e39dd1c87429a5e8dd9b955eb9156a3e112daaa27cc" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="f0f319046fdd2c5debb2c6a7cdaada6468a7ef72a6fef5a9a8ec44d706c08b55" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="4c79302c7f7f84a37c2802302bb73affbeda59224b6334ba6bd1f0195cf2a91b" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="ea8a9b3dfc5ab2228e28759c4e2cdd35f9e4a33c3e7832c16cdc773957b36cd1" name="kernel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="3f17ecb5d087de2a9cfd54504c0c4556e5ec690e4601433b2ac9171b669e4181" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="ace1364ddda094a889a06e48da9dbdc6d4d6719408f7f87d73d15f021a49309a" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="61d00a85c969d4ad3c546c0fdc5c9a46e2f4f532f9d1f11ec4bdf5af2f7c4d2f" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="fec61a80d6ea311a1ed4aec512214780e7fb73ad8ebc604ff599c30fbab97a12" name="kernel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="b4f9973860a30c0ff6f2294f758222f2908a1565d6b1670eb4211f63cf65c46b" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="4d8f087d06e445e39b86bd929916fb6040302ba58fbc51a58cf85601f36ae138" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="7fca85a1073f44c44f144c6e020a75ff18e6a5326abb025587d3ce8e0c1561c0" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="b7b3d4ceed70a0267e8e1e89f93593a1f404662500d06caa5279c5c9cab19403" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="b3381ff0b0d4420f4705708c9cae49ced6d41f2395dc7f828c24bc46de0f126e" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="c37fd876d5482be9a142e7942702f4e61613916a52ebf54598ab8d92c896e445" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="2ebd104bb063fcfc4614858a6d0fe261c353f996c7e5ed54c80524881ca92985" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="91bd0e1a8e2ef1bc7113aad67883950f58d6fd083bd1728cc3a31b35b6500cb3" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="801f63a9750ca0073f387908b6cbbe53f2d6791d813a557de0685cc665051199" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="043ede088789c9f705808793e82d1f25e0b6fc4d19eb3a7fa0dcf017ef301ede" name="kernel-abi-whitelists" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="edc9c2b8525752f0e629bebcc601f5f7558b1bbc57cc92a9b5791d135e57c49f" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="9188dea458bbba5bdc554e6278c8be658e940bf23164101ad00c855b90d4b2d9" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="d33e1a367fecdfa82aba9b075508fb6fa330ba3f668c6ebb9b469e6ecab53e5a" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="7ebe132042c0f08555f597389f3ac890772d56c60b23e668fabe1d6db9965a6c" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="55684781938b0122cb0190e0484c86a4c7b4b5b998a0a0a3d4a65af80556c5d9" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="ab00e29555ebade4f6f2f59ecca9f4622eb7e2738928a7a486eeeceb41fd1d74" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="e946b678991d0c0f162080867d3787ab7018eebcac433d399a42ec686c8f24c1" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="eea54b6ca3a269b5e0f160ba7b7796be7b4101e9de93a442143edb10d675f629" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="118208ccca2a18346849becf36401badbd494e0138539055bad16e5230663b0f" name="kernel-debug-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="e0743ec1cb7146842115e478768156e0f4cd719668ae00bec14cfba1ab061c76" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="b159d22ce553a3691f9b2bd99499ea62dd79cc3589aafffe5e2e6c4282f11a04" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="1d730f78f3417e41ed0f2034989891ddc48524adda6aacd5fef1b007eb9bfad1" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="65e688d27775273a5978fe8eb7f2b11d2195425a0498fb22064c68eaa8551926" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="f8808a738dc16e66ecb22734a849c2d239a145664da8ce0f79f539f2990f09ac" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="b62b1e536b454eb2570f9111ac00f3de83677788a79aabe3a20abe3f4dccb042" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="25e50d8c9838f9850f18ef8c790ffa7012794370264662890d10725dacb89a5c" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="ee61e34014a6aab2b1cc84861393ce4d37498fcfff71692fa9dc6e53f215680c" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="c8824b3c61b4996ba53fdae707acd0fee60152b5ca7b3a4d0578e8e887f20a84" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="8923779174d39ad9df7f25f538e38130ee88f38c0f0abd18402efd0da21851d0" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="cec5c04ee5e6913230caf683f4d7bea14a063a4afcbca7f1109633f8738a8117" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="ae94c1dc37020865f4fcf6b054c1e3e6a3b324abb13c49080c6f76ab0d8e1da6" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="789578c806d557f62161b38c118c134c1899347e0dbfe921f9749231c00f384b" name="kernel-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="28feb6cfe78fe965d8b51176c3f8bf958945c4f8ac55fa14502d2bfec9860ca8" name="kernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="02ffcaee44f01ed3cdd9bd4e1389e85ebc079aacdc5bfddc06c4b3fdc02b7e99" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="d1b28666fd7c44279a8639e9d524cac0e849df0db75264b18d8f104440c59b10" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="2461ecb3859e465e4430cf1388c42755843a95e5a949ce6fde50478843ee8ae3" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="43a0a16743426ca594a219dd18246a2bef5a405bcadf925c29eb916a0a906653" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="16375de898ec090db8e66554a1393349b61a4a91aca16138500409c7e0d0f5ef" name="kernel-debuginfo-common-i686" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="f48b0f18a40a18a8023c5bd1f9730dc3a0928fb2032e828de6d17d555da1ad41" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="137a27fe5d91d3b2c1121e54f6fb6dfc584ed9e493394bc75a6927c09782c6e1" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="4e931904151ff147cf9c6b22669fbad700c275964789e4366c19ee38492bc109" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="8d54fda44ca5406a211960a45d22f93aebbb96a34d4cddc6ac9aa6d5ac703563" name="kernel-debuginfo-common-x86_64" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="248e878617d508abf5d63007680e7eb86bd5eff10fe920000de3102cc7ea02d5" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="2e4e725501c82e9e336eba8f61bfbc53c146dcb4661bb466fd95473ac1375e57" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="474ddfc8fb1675ef5f1f408f26e94205ffa03cbcb6190c9e0f74451d7b48d39a" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="b35c1e1e9752315bdff6c5ca2af66bef8ab251f0845cdacf91eb1f67a685d64c" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="3a1f7670479e128bdc9c11ccbc93a56df18a89beac6032f16e17a7c1463cf8d9" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="5501e6839bd8806604cc749c582883fe53e4e7eb4ec4b521a212e5fc23d28ee9" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="2db57d78a644b5caaed8ef79d9ec6213528b7ae7ac6f0ff579a35a86599fe121" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="53f28fc067d93fc7b379e0476c3799a4e2c536b91867ef7ade89b713b1f6230b" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="7e30d8e7818a787502dceb7f8b4e122e00cfdce8ef8fa93b2dca1c2690c8ce9a" name="kernel-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="a09a1286966c3aa4e6e14b741fa16feed37be7361b46bbb16c61d9024bdd3123" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="c288032829399bc8e742a8f35414a95c619cf3989dc448c51aae31d56e029360" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="fd73a3e3ac3a73eb74d5d809458dbabe5044fde7214d853d06c2d9eb0c52f3c9" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="914d7fe7ca67f35b4d251e6c5af9c9d891f63cf345eeef0edf8fa4bbb7725856" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="38a947ebf354b2769c460538f66d566d46bb8749716c0e06337b4d529ab9a491" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="00db0d382bd6feff10c879680e9330121e4da82476d96678536e8d31ccb9d785" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="c6f5c6b7cc3a2e3647a0e4c4170610d760ad7dde955fc28f5ddc903d45ef08cf" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="72bb24b68defb3e937a10f988f5448d248bda0e9ea32cd0f5b9e0a42057feec4" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="03dbccafd8ee78fbb1c4e41b5aa2788db7051d6a767462741607b023afbfc417" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="db83cf4048c6ca2934ea360c77e7017eb2c22a88021f00145c0e45752061ce73" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="35e00fb9ed01ed24836df8746f5ea63dc04b1ed85974f8711c45ea4a34f368b6" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="75cfab266d323f8f98dfce10c7f3ab258c18c6387fa5169fb7d620a6100c8da5" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="e60e59cb4db2a81b27043b9c4a4e9a2ddd303f5769b312ec5461e5589060031d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="57e1bce25f3f2c853bfa3a631972cea0632a120403ee3cd090915635aad1779c" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="066465dc1c4cbbe2d67caf0b1a4f93c0521c314bf40f04c61f8b04821dcae0ca" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="e56beb8e5509f44d0e9a3f3a180dd03e45489d062d91895888af51e221ff97f4" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="f8243e46a3483d1e1f9189c061ce4b40ae786c53580a43db1af8432b4486b58e" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="a19d85712cc1372c7f9c20deb0d6df4c32bb7e3d68353caf5be72d9b48aaa036" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="a6f38b2c645da9d9d98a793c0ad5af0ef818917e9ac50390085b294fc061d706" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="e8edf0dcbc3442abc7534891b19c3321ee4ad2394fcf6a4e794a4de3c8f22232" name="kernel-headers" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="2a1bc3176403ce599023c9d67e7a3bc6ca795e6cd0197aaf7490c61009e8976f" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="049a4535c4c8249839f192708f3930439757344acd2dca4d2e0d8b4450d0ab37" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="c5cac9c171f8dd5101ca70377445e031901e9fe1c666065899b1770bc6dcdc50" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="a6a5eb5db997db0cbb5fe85bbd499aa15c03c9496f8a70bc8d5ab5fd68aa504c" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="5e27e7e59b357670478e584dbf7c4de12b91efb4d848b25cd99a9173d9c9983d" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="527c289e7d7c0efeb1d5f48e5c3e766c553362d283d0f476d2d550de092dde35" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="8b2e423ddf138dd60e90fdf776afed374fab7eb6c4bad7cda8d2af4a403361dd" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="ed90a1606fe621b701c608ed639a38379cf6bea1cc4819f639c1d27693ce4be7" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="89baf13192c723ee06f636e8e8c1f894c4a3c6a9e84f3563c72711df043043a2" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="2d251302578eeff493efecd4a7924de9148138116492b60c56dc971d50f0abf0" name="kernel-tools" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="201e4fd6eb6c606078cbc008487d95ed00c71ca9b12ebd3cccdb43fb5a693f69" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="a3e164996aebf92577e086c2fafef38a7441f59a2f8448ef2e444951694431be" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="fe51ffcd8f63b02bd22f32731b7f40102b854b77f505d3658fa9389c443a83c3" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="d4735dfaaf0b2acb72f856f59a7024c1749505ed97ae3e602c4c29e78d0fa308" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="68045e11804c1cffb9968a7a14a865f5cd0c18d5f0fec0841600eddcacc5687d" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="d484f6d55dda1b32d716a902f9d653a7f6c2ad8a03267b022baf27ea4aaacf9b" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="0ab73063976ca36f9bdc1a9859d43570823ab9346d25dbe301ed14dbb7eb3c6e" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="2c5965e96949fcb08d1a42b32b53e86f95b5c3019bc7f087c7b47fcbfc881dc8" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="61283e0b25e2013e170a83ffe093dd72d5ed714c7ea80d6bc1e67285ef7e3814" name="kernel-tools-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="202c28ce3f0ff6836ddeb9a52eb6de41c55e8c3e97c47238484a591789bf9817" name="kernel-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="0358858205fa788af2fff988f29e1941f94829de77af5736d44488becb73e08e" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="361a83ac72d0e98e9e377a4b1b5bf3c4f91a9c64f418cda42c40cda565a8862d" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="2145170fbaa018d6e47a44d23cce17ddde86f3065920fc838fd0cf800c923905" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="a858428ea8419898b6da04fbdf043f12c56fd5f957f9983abbfce5470c035216" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="42f8049c10373597dde071e6d9a2ce19d6216811b41970ac6f95155dc8415a60" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="03911680182fd32afb1ead3fba01ef66715b88516bb9aeba22ffef3c01df96bd" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="5877d51d0f28ace3a9c338e995fa22c2dee8d48e748cd30fc0f3eea8ffef2e36" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="cf153437c50ef8556a9127649b4d567a071725233e09a68ce6478657f3e848c9" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="4aa85edd62ebb8bb7bce7f6e819ef54f0b3e367262f52298ca9c1253d66efae0" name="kernel-tools-libs" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="5c8bea7e1b1164f18583df904fab9e295c41257eb30b33f3e0408fb194d60a25" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="f91f1948ad22927a19c3e3dfbad10e031548854e423b925af7cb4c52e5803439" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="63a242499ea5c44688b6c52d90ae97c5c20f0778f4f4eb3f5f318c78c2021fa1" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="bc447b6022c4c351b13fb2f252f12c8fba2aabf732c9eaa139f2af5300df2507" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="636d38175b471dec1267abb7a4d02cdadf1f6324d22207d88ac70da97c140447" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="a64cf66ebffa00376a699bbb38093a640f4444f57df7c3dfa6e79c2fde1beefd" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="d9cf83bbef84b3e19c207283928383e24c9a29f56770d75e76caf7cdd3583614" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="524303b9f3864582e8792b1b39562f78d826652c3caec1aa25a533b42c0752b5" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="7ada149759281df81f0ec85134e81a19e23242855aba0443fafa80752baf9b17" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="8897734c93d62576aeb77776d558f9b7af3185dce6972780f164faf80c1c16eb" name="kernel-tools-libs-devel" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="5bb5f05c26b26fc162bb72bd94d8707b8ec0a7ab755a075ce143222e16987a10" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="bc5371a3e3eb9906aa375c67106f19c15bf86273cef0d6ea44a47dcd8001adf1" name="kexec-tools" arch="i686">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="6465c9b5322b7e455d657e21f85a0387b29f0753470833e1eabd0cfd7f19a7ec" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="472a7ca37e6ba5912794ad823a85b818215e85f37b280ea7a1509e9540ea181e" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="336bbd1ff88a1b7951bad1ab8c98c4076186e89bd458b18d8da898a9ae6810b4" name="kexec-tools" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="b722153ec1fd457639f7a964077a95eb6c41532b19fb7460476a7f72f8963559" name="kexec-tools-anaconda-addon" arch="i686">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="b5718b918d529929d3d0343c0835e2a2e5f562b808b20b2af9a736f0e05d8110" name="kexec-tools-anaconda-addon" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="0791027de20b97d2426b4285181240c43b235b2041874ef493951ec89e37a37d" name="kexec-tools-debuginfo" arch="i686">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="6838376bd1dbca004f7649e940e0c5cf318678730d72171e12bb3089213aa90e" name="kexec-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="5f1ca9352a40e868cf380489ee35411699941dd1f0da74fe77f3d1edcb2d893b" name="kexec-tools-eppic" arch="i686">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="8ad06e7381765c4fe6deafe63c47f780cc91be864e533c1426e1fac031cb23fb" name="kexec-tools-eppic" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="f5b2b74f6772445045c274b126e97ca334a9e3d0117cdcfe40b283751f22f314" name="kmod-kvdo" arch="src">
  <version epoch="0" ver="6.1.0.168" rel="16.el7_5"/>
  <changelog author="Joe Chapman &lt;jochapma@redhat.com&gt; 6.1.0.97-11" date="1513080000">- Default logical size is no longer over-provisioned
- Remove debug logging when verifying dedupe advice
- Resolves: rhbz#1519330</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.106-11" date="1513857600">- Detect journal overflow after 160E of writes
- Clean up UDS threads when removing last VDO
- Resolves: rhbz#1512968
- Resolves: rhbz#1523240</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.114-11" date="1515585600">- /sys/uds permissions now resticted to superuser only
- Remove /sys/uds files that should not be used in production
- Removing kvdo module reports version
- VDO automatically chooses the proper write policy by default
- Fixed a Coverity-detected error path leak
- Resolves: rhbz#1525305
- Resolves: rhbz#1527734
- Resolves: rhbz#1527737
- Resolves: rhbz#1527924
- Resolves: rhbz#1528399</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-11" date="1516363200">- Fixed provisional referencing for dedupe.
- Only log a bio submission from a VDO to itself.
- vdoformat cleans up metadata properly after fail.
- Resolves: rhbz#1511587
- Resolves: rhbz#1520972
- Resolves: rhbz#1532481</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-12" date="1517486400">- Fix General Protection Fault unlocking UDS callback mutex
- Removing kmod-kvdo package unloads kernel module
- Fix URL to point to GitHub tree
- Resolves: rhbz#1510176
- Resolves: rhbz#1533260
- Resolves: rhbz#1539061</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-13" date="1517918400">- Updated summary and descriptions
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-13" date="1518004800">- Module target is now "vdo" instead of "dedupe"
- Fixed a bug where crash recovery led to failed kernel page request
- Improved modification log messages
- Improved package description and summary fields
- Resolves: rhbz#1535127
- Resolves: rhbz#1535597
- Resolves: rhbz#1540696
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-13" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.153-15" date="1519732800">- Fixed preun handling of loaded modules
- Resolves: rhbz#1549178</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-16" date="1525003200">- Updated source to use GitHub
- Fixed module version checking for upgrades.
- Removed debug kernel requirement from spec file.
- Fixed a deadlock resulting from sleeping while holding a spinlock while
  getting statistics.
- Resolves: rhbz#1567742
- Fixed bugs arising from attempts to access sysfs nodes during startup and
  shutdown.
- Resolves: rhbz#1567744
- Removed the prepare_ioctl() function to avoid signature changes since this
  function currently does nothing.
- Resolves: rhbz#1572494</changelog>
</package>
<package pkgid="d3fb6821e3a8b0b8d7a2c5fb1d42b429a8160658a7e5b3a6e61131e4de0cf13f" name="kmod-kvdo" arch="x86_64">
  <version epoch="0" ver="6.1.0.168" rel="16.el7_5"/>
  <changelog author="Joe Chapman &lt;jochapma@redhat.com&gt; 6.1.0.97-11" date="1513080000">- Default logical size is no longer over-provisioned
- Remove debug logging when verifying dedupe advice
- Resolves: rhbz#1519330</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.106-11" date="1513857600">- Detect journal overflow after 160E of writes
- Clean up UDS threads when removing last VDO
- Resolves: rhbz#1512968
- Resolves: rhbz#1523240</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.114-11" date="1515585600">- /sys/uds permissions now resticted to superuser only
- Remove /sys/uds files that should not be used in production
- Removing kvdo module reports version
- VDO automatically chooses the proper write policy by default
- Fixed a Coverity-detected error path leak
- Resolves: rhbz#1525305
- Resolves: rhbz#1527734
- Resolves: rhbz#1527737
- Resolves: rhbz#1527924
- Resolves: rhbz#1528399</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-11" date="1516363200">- Fixed provisional referencing for dedupe.
- Only log a bio submission from a VDO to itself.
- vdoformat cleans up metadata properly after fail.
- Resolves: rhbz#1511587
- Resolves: rhbz#1520972
- Resolves: rhbz#1532481</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-12" date="1517486400">- Fix General Protection Fault unlocking UDS callback mutex
- Removing kmod-kvdo package unloads kernel module
- Fix URL to point to GitHub tree
- Resolves: rhbz#1510176
- Resolves: rhbz#1533260
- Resolves: rhbz#1539061</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-13" date="1517918400">- Updated summary and descriptions
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-13" date="1518004800">- Module target is now "vdo" instead of "dedupe"
- Fixed a bug where crash recovery led to failed kernel page request
- Improved modification log messages
- Improved package description and summary fields
- Resolves: rhbz#1535127
- Resolves: rhbz#1535597
- Resolves: rhbz#1540696
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-13" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.153-15" date="1519732800">- Fixed preun handling of loaded modules
- Resolves: rhbz#1549178</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-16" date="1525003200">- Updated source to use GitHub
- Fixed module version checking for upgrades.
- Removed debug kernel requirement from spec file.
- Fixed a deadlock resulting from sleeping while holding a spinlock while
  getting statistics.
- Resolves: rhbz#1567742
- Fixed bugs arising from attempts to access sysfs nodes during startup and
  shutdown.
- Resolves: rhbz#1567744
- Removed the prepare_ioctl() function to avoid signature changes since this
  function currently does nothing.
- Resolves: rhbz#1572494</changelog>
</package>
<package pkgid="fd9ecd0e2a913436d71016f4d44b2df348f5a289552ed5515e6db9aa0a83f5fa" name="kmod-kvdo" arch="src">
  <version epoch="0" ver="6.1.0.171" rel="17.el7_5"/>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.114-11" date="1515585600">- /sys/uds permissions now resticted to superuser only
- Remove /sys/uds files that should not be used in production
- Removing kvdo module reports version
- VDO automatically chooses the proper write policy by default
- Fixed a Coverity-detected error path leak
- Resolves: rhbz#1525305
- Resolves: rhbz#1527734
- Resolves: rhbz#1527737
- Resolves: rhbz#1527924
- Resolves: rhbz#1528399</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-11" date="1516363200">- Fixed provisional referencing for dedupe.
- Only log a bio submission from a VDO to itself.
- vdoformat cleans up metadata properly after fail.
- Resolves: rhbz#1511587
- Resolves: rhbz#1520972
- Resolves: rhbz#1532481</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-12" date="1517486400">- Fix General Protection Fault unlocking UDS callback mutex
- Removing kmod-kvdo package unloads kernel module
- Fix URL to point to GitHub tree
- Resolves: rhbz#1510176
- Resolves: rhbz#1533260
- Resolves: rhbz#1539061</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-13" date="1517918400">- Updated summary and descriptions
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-13" date="1518004800">- Module target is now "vdo" instead of "dedupe"
- Fixed a bug where crash recovery led to failed kernel page request
- Improved modification log messages
- Improved package description and summary fields
- Resolves: rhbz#1535127
- Resolves: rhbz#1535597
- Resolves: rhbz#1540696
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-13" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.153-15" date="1519732800">- Fixed preun handling of loaded modules
- Resolves: rhbz#1549178</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-16" date="1525003200">- Updated source to use GitHub
- Fixed module version checking for upgrades.
- Removed debug kernel requirement from spec file.
- Fixed a deadlock resulting from sleeping while holding a spinlock while
  getting statistics.
- Resolves: rhbz#1567742
- Fixed bugs arising from attempts to access sysfs nodes during startup and
  shutdown.
- Resolves: rhbz#1567744
- Removed the prepare_ioctl() function to avoid signature changes since this
  function currently does nothing.
- Resolves: rhbz#1572494</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-16" date="1526731200">- Fixed a bug which prevented disabling of the UDS index.
- Resolves: rhbz#1578421</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-17" date="1528718400">- Bumped NVR to maintain kABI compatibility.
- Resolves: rhbz#1578421</changelog>
</package>
<package pkgid="0c34e7318f5fc6d124678a3fc1b29e034d9b9711106efa652449f9891ab0c24f" name="kmod-kvdo" arch="x86_64">
  <version epoch="0" ver="6.1.0.171" rel="17.el7_5"/>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.114-11" date="1515585600">- /sys/uds permissions now resticted to superuser only
- Remove /sys/uds files that should not be used in production
- Removing kvdo module reports version
- VDO automatically chooses the proper write policy by default
- Fixed a Coverity-detected error path leak
- Resolves: rhbz#1525305
- Resolves: rhbz#1527734
- Resolves: rhbz#1527737
- Resolves: rhbz#1527924
- Resolves: rhbz#1528399</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-11" date="1516363200">- Fixed provisional referencing for dedupe.
- Only log a bio submission from a VDO to itself.
- vdoformat cleans up metadata properly after fail.
- Resolves: rhbz#1511587
- Resolves: rhbz#1520972
- Resolves: rhbz#1532481</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-12" date="1517486400">- Fix General Protection Fault unlocking UDS callback mutex
- Removing kmod-kvdo package unloads kernel module
- Fix URL to point to GitHub tree
- Resolves: rhbz#1510176
- Resolves: rhbz#1533260
- Resolves: rhbz#1539061</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-13" date="1517918400">- Updated summary and descriptions
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-13" date="1518004800">- Module target is now "vdo" instead of "dedupe"
- Fixed a bug where crash recovery led to failed kernel page request
- Improved modification log messages
- Improved package description and summary fields
- Resolves: rhbz#1535127
- Resolves: rhbz#1535597
- Resolves: rhbz#1540696
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-13" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.153-15" date="1519732800">- Fixed preun handling of loaded modules
- Resolves: rhbz#1549178</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-16" date="1525003200">- Updated source to use GitHub
- Fixed module version checking for upgrades.
- Removed debug kernel requirement from spec file.
- Fixed a deadlock resulting from sleeping while holding a spinlock while
  getting statistics.
- Resolves: rhbz#1567742
- Fixed bugs arising from attempts to access sysfs nodes during startup and
  shutdown.
- Resolves: rhbz#1567744
- Removed the prepare_ioctl() function to avoid signature changes since this
  function currently does nothing.
- Resolves: rhbz#1572494</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-16" date="1526731200">- Fixed a bug which prevented disabling of the UDS index.
- Resolves: rhbz#1578421</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-17" date="1528718400">- Bumped NVR to maintain kABI compatibility.
- Resolves: rhbz#1578421</changelog>
</package>
<package pkgid="3d14ffac444d6d65fe0d9286de4ef4116f9679865b3bf67ed4ae9ee558d9cf8e" name="kmod-kvdo" arch="src">
  <version epoch="0" ver="6.1.0.181" rel="17.el7_5"/>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-11" date="1516363200">- Fixed provisional referencing for dedupe.
- Only log a bio submission from a VDO to itself.
- vdoformat cleans up metadata properly after fail.
- Resolves: rhbz#1511587
- Resolves: rhbz#1520972
- Resolves: rhbz#1532481</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-12" date="1517486400">- Fix General Protection Fault unlocking UDS callback mutex
- Removing kmod-kvdo package unloads kernel module
- Fix URL to point to GitHub tree
- Resolves: rhbz#1510176
- Resolves: rhbz#1533260
- Resolves: rhbz#1539061</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-13" date="1517918400">- Updated summary and descriptions
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-13" date="1518004800">- Module target is now "vdo" instead of "dedupe"
- Fixed a bug where crash recovery led to failed kernel page request
- Improved modification log messages
- Improved package description and summary fields
- Resolves: rhbz#1535127
- Resolves: rhbz#1535597
- Resolves: rhbz#1540696
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-13" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.153-15" date="1519732800">- Fixed preun handling of loaded modules
- Resolves: rhbz#1549178</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-16" date="1525003200">- Updated source to use GitHub
- Fixed module version checking for upgrades.
- Removed debug kernel requirement from spec file.
- Fixed a deadlock resulting from sleeping while holding a spinlock while
  getting statistics.
- Resolves: rhbz#1567742
- Fixed bugs arising from attempts to access sysfs nodes during startup and
  shutdown.
- Resolves: rhbz#1567744
- Removed the prepare_ioctl() function to avoid signature changes since this
  function currently does nothing.
- Resolves: rhbz#1572494</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-16" date="1526731200">- Fixed a bug which prevented disabling of the UDS index.
- Resolves: rhbz#1578421</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-17" date="1528718400">- Bumped NVR to maintain kABI compatibility.
- Resolves: rhbz#1578421</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.181-17" date="1532174400">- Fixed a bug which would cause kernel panics when a VDO device is stacked on a
  RAID50 device.
- Resolves: rhbz#1599668
- Fixed a bug which could cause data loss when discarding unused portions of a
  VDO's logical space.
- Resolves: rhbz#1600058
- Modified grow physical to fail in the prepare step if the size isn't
  changing, avoiding a suspend-and-resume cycle.
- Resolves: rhbz#1600662
- Fixed a bug which would cause attempts to grow the physical size of a VDO
  device to fail if the device below the VDO was resized while the VDO was
  offline.
- Resolves: rhbz#1591180</changelog>
</package>
<package pkgid="e7d41cb715f8e17f25ba9f9e61a026ec5344e88624432be71de336bb5e9ed2ef" name="kmod-kvdo" arch="x86_64">
  <version epoch="0" ver="6.1.0.181" rel="17.el7_5"/>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-11" date="1516363200">- Fixed provisional referencing for dedupe.
- Only log a bio submission from a VDO to itself.
- vdoformat cleans up metadata properly after fail.
- Resolves: rhbz#1511587
- Resolves: rhbz#1520972
- Resolves: rhbz#1532481</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-12" date="1517486400">- Fix General Protection Fault unlocking UDS callback mutex
- Removing kmod-kvdo package unloads kernel module
- Fix URL to point to GitHub tree
- Resolves: rhbz#1510176
- Resolves: rhbz#1533260
- Resolves: rhbz#1539061</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-13" date="1517918400">- Updated summary and descriptions
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-13" date="1518004800">- Module target is now "vdo" instead of "dedupe"
- Fixed a bug where crash recovery led to failed kernel page request
- Improved modification log messages
- Improved package description and summary fields
- Resolves: rhbz#1535127
- Resolves: rhbz#1535597
- Resolves: rhbz#1540696
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-13" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.153-15" date="1519732800">- Fixed preun handling of loaded modules
- Resolves: rhbz#1549178</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-16" date="1525003200">- Updated source to use GitHub
- Fixed module version checking for upgrades.
- Removed debug kernel requirement from spec file.
- Fixed a deadlock resulting from sleeping while holding a spinlock while
  getting statistics.
- Resolves: rhbz#1567742
- Fixed bugs arising from attempts to access sysfs nodes during startup and
  shutdown.
- Resolves: rhbz#1567744
- Removed the prepare_ioctl() function to avoid signature changes since this
  function currently does nothing.
- Resolves: rhbz#1572494</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-16" date="1526731200">- Fixed a bug which prevented disabling of the UDS index.
- Resolves: rhbz#1578421</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-17" date="1528718400">- Bumped NVR to maintain kABI compatibility.
- Resolves: rhbz#1578421</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.181-17" date="1532174400">- Fixed a bug which would cause kernel panics when a VDO device is stacked on a
  RAID50 device.
- Resolves: rhbz#1599668
- Fixed a bug which could cause data loss when discarding unused portions of a
  VDO's logical space.
- Resolves: rhbz#1600058
- Modified grow physical to fail in the prepare step if the size isn't
  changing, avoiding a suspend-and-resume cycle.
- Resolves: rhbz#1600662
- Fixed a bug which would cause attempts to grow the physical size of a VDO
  device to fail if the device below the VDO was resized while the VDO was
  offline.
- Resolves: rhbz#1591180</changelog>
</package>
<package pkgid="0eb03d9fa9338cca77e06cc347a4e5a7b59bbe8a91c5906f59a1451638c9b933" name="kmod-kvdo-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.1.0.168" rel="16.el7_5"/>
  <changelog author="Joe Chapman &lt;jochapma@redhat.com&gt; 6.1.0.97-11" date="1513080000">- Default logical size is no longer over-provisioned
- Remove debug logging when verifying dedupe advice
- Resolves: rhbz#1519330</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.106-11" date="1513857600">- Detect journal overflow after 160E of writes
- Clean up UDS threads when removing last VDO
- Resolves: rhbz#1512968
- Resolves: rhbz#1523240</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.114-11" date="1515585600">- /sys/uds permissions now resticted to superuser only
- Remove /sys/uds files that should not be used in production
- Removing kvdo module reports version
- VDO automatically chooses the proper write policy by default
- Fixed a Coverity-detected error path leak
- Resolves: rhbz#1525305
- Resolves: rhbz#1527734
- Resolves: rhbz#1527737
- Resolves: rhbz#1527924
- Resolves: rhbz#1528399</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-11" date="1516363200">- Fixed provisional referencing for dedupe.
- Only log a bio submission from a VDO to itself.
- vdoformat cleans up metadata properly after fail.
- Resolves: rhbz#1511587
- Resolves: rhbz#1520972
- Resolves: rhbz#1532481</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-12" date="1517486400">- Fix General Protection Fault unlocking UDS callback mutex
- Removing kmod-kvdo package unloads kernel module
- Fix URL to point to GitHub tree
- Resolves: rhbz#1510176
- Resolves: rhbz#1533260
- Resolves: rhbz#1539061</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-13" date="1517918400">- Updated summary and descriptions
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-13" date="1518004800">- Module target is now "vdo" instead of "dedupe"
- Fixed a bug where crash recovery led to failed kernel page request
- Improved modification log messages
- Improved package description and summary fields
- Resolves: rhbz#1535127
- Resolves: rhbz#1535597
- Resolves: rhbz#1540696
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-13" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.153-15" date="1519732800">- Fixed preun handling of loaded modules
- Resolves: rhbz#1549178</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-16" date="1525003200">- Updated source to use GitHub
- Fixed module version checking for upgrades.
- Removed debug kernel requirement from spec file.
- Fixed a deadlock resulting from sleeping while holding a spinlock while
  getting statistics.
- Resolves: rhbz#1567742
- Fixed bugs arising from attempts to access sysfs nodes during startup and
  shutdown.
- Resolves: rhbz#1567744
- Removed the prepare_ioctl() function to avoid signature changes since this
  function currently does nothing.
- Resolves: rhbz#1572494</changelog>
</package>
<package pkgid="41397d9b8b66685a7fbe05414b05a20532ac316c7153344c4bbd7b565d7f729c" name="kmod-kvdo-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.1.0.171" rel="17.el7_5"/>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.114-11" date="1515585600">- /sys/uds permissions now resticted to superuser only
- Remove /sys/uds files that should not be used in production
- Removing kvdo module reports version
- VDO automatically chooses the proper write policy by default
- Fixed a Coverity-detected error path leak
- Resolves: rhbz#1525305
- Resolves: rhbz#1527734
- Resolves: rhbz#1527737
- Resolves: rhbz#1527924
- Resolves: rhbz#1528399</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-11" date="1516363200">- Fixed provisional referencing for dedupe.
- Only log a bio submission from a VDO to itself.
- vdoformat cleans up metadata properly after fail.
- Resolves: rhbz#1511587
- Resolves: rhbz#1520972
- Resolves: rhbz#1532481</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-12" date="1517486400">- Fix General Protection Fault unlocking UDS callback mutex
- Removing kmod-kvdo package unloads kernel module
- Fix URL to point to GitHub tree
- Resolves: rhbz#1510176
- Resolves: rhbz#1533260
- Resolves: rhbz#1539061</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-13" date="1517918400">- Updated summary and descriptions
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-13" date="1518004800">- Module target is now "vdo" instead of "dedupe"
- Fixed a bug where crash recovery led to failed kernel page request
- Improved modification log messages
- Improved package description and summary fields
- Resolves: rhbz#1535127
- Resolves: rhbz#1535597
- Resolves: rhbz#1540696
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-13" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.153-15" date="1519732800">- Fixed preun handling of loaded modules
- Resolves: rhbz#1549178</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-16" date="1525003200">- Updated source to use GitHub
- Fixed module version checking for upgrades.
- Removed debug kernel requirement from spec file.
- Fixed a deadlock resulting from sleeping while holding a spinlock while
  getting statistics.
- Resolves: rhbz#1567742
- Fixed bugs arising from attempts to access sysfs nodes during startup and
  shutdown.
- Resolves: rhbz#1567744
- Removed the prepare_ioctl() function to avoid signature changes since this
  function currently does nothing.
- Resolves: rhbz#1572494</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-16" date="1526731200">- Fixed a bug which prevented disabling of the UDS index.
- Resolves: rhbz#1578421</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-17" date="1528718400">- Bumped NVR to maintain kABI compatibility.
- Resolves: rhbz#1578421</changelog>
</package>
<package pkgid="c66f496c4b684e85110d0a6873853d2430c0aa304b1bb6380a60467b547cd34f" name="kmod-kvdo-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.1.0.181" rel="17.el7_5"/>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-11" date="1516363200">- Fixed provisional referencing for dedupe.
- Only log a bio submission from a VDO to itself.
- vdoformat cleans up metadata properly after fail.
- Resolves: rhbz#1511587
- Resolves: rhbz#1520972
- Resolves: rhbz#1532481</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-12" date="1517486400">- Fix General Protection Fault unlocking UDS callback mutex
- Removing kmod-kvdo package unloads kernel module
- Fix URL to point to GitHub tree
- Resolves: rhbz#1510176
- Resolves: rhbz#1533260
- Resolves: rhbz#1539061</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-13" date="1517918400">- Updated summary and descriptions
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-13" date="1518004800">- Module target is now "vdo" instead of "dedupe"
- Fixed a bug where crash recovery led to failed kernel page request
- Improved modification log messages
- Improved package description and summary fields
- Resolves: rhbz#1535127
- Resolves: rhbz#1535597
- Resolves: rhbz#1540696
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-13" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.153-15" date="1519732800">- Fixed preun handling of loaded modules
- Resolves: rhbz#1549178</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-16" date="1525003200">- Updated source to use GitHub
- Fixed module version checking for upgrades.
- Removed debug kernel requirement from spec file.
- Fixed a deadlock resulting from sleeping while holding a spinlock while
  getting statistics.
- Resolves: rhbz#1567742
- Fixed bugs arising from attempts to access sysfs nodes during startup and
  shutdown.
- Resolves: rhbz#1567744
- Removed the prepare_ioctl() function to avoid signature changes since this
  function currently does nothing.
- Resolves: rhbz#1572494</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-16" date="1526731200">- Fixed a bug which prevented disabling of the UDS index.
- Resolves: rhbz#1578421</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.171-17" date="1528718400">- Bumped NVR to maintain kABI compatibility.
- Resolves: rhbz#1578421</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.181-17" date="1532174400">- Fixed a bug which would cause kernel panics when a VDO device is stacked on a
  RAID50 device.
- Resolves: rhbz#1599668
- Fixed a bug which could cause data loss when discarding unused portions of a
  VDO's logical space.
- Resolves: rhbz#1600058
- Modified grow physical to fail in the prepare step if the size isn't
  changing, avoiding a suspend-and-resume cycle.
- Resolves: rhbz#1600662
- Fixed a bug which would cause attempts to grow the physical size of a VDO
  device to fail if the device below the VDO was resized while the VDO was
  offline.
- Resolves: rhbz#1591180</changelog>
</package>
<package pkgid="ad6ecd83d54a0b44f4a5909cff4e220b978ed94ffaec84daf9ebe161c1aff853" name="kmod-redhat-megaraid_sas" arch="src">
  <version epoch="0" ver="07.702.06.00_rh2_dup7.5" rel="1.el7_5"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 07.702.06.00_rh2_dup7.5-1" date="1526385600">- 1514ac33c3e6a00c504e6e5eb0289f3c23bb8aa4
- Resolves: #bz1578455
- megaraid_sas module for Driver Update Program</changelog>
</package>
<package pkgid="b504f047642bd7992ecca2efc309fed03665d052d307171174c5bd570291ee5c" name="kmod-redhat-megaraid_sas" arch="x86_64">
  <version epoch="0" ver="07.702.06.00_rh2_dup7.5" rel="1.el7_5"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 07.702.06.00_rh2_dup7.5-1" date="1526385600">- 1514ac33c3e6a00c504e6e5eb0289f3c23bb8aa4
- Resolves: #bz1578455
- megaraid_sas module for Driver Update Program</changelog>
</package>
<package pkgid="aaeca6ea26ad98f565184b9d3ce88e0cfb0671b3f4a53a6795f2c6dbf20e7820" name="kmod-redhat-megaraid_sas-debuginfo" arch="x86_64">
  <version epoch="0" ver="07.702.06.00_rh2_dup7.5" rel="1.el7_5"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; 07.702.06.00_rh2_dup7.5-1" date="1526385600">- 1514ac33c3e6a00c504e6e5eb0289f3c23bb8aa4
- Resolves: #bz1578455
- megaraid_sas module for Driver Update Program</changelog>
</package>
<package pkgid="9eefd8476e1f819cd377ba48f717cfef0965917f6ad404f29b88547cd5b60561" name="kpartx" arch="i686">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="4340e5269dd924f497a28a54c0fbe8e56a95bcaa1b0c3d15c5e8517f689aa73c" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="de41d5e0c95d7c9cff681962ee8549a82f11a0cc40e91af6fb78de2539d097e2" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="2f4e3888208c6d344d651106e7f53230262bcebcce8e8a711496240b1b27e0c9" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="41c6cc854b0b2c88b2de60cc25b205d091d4957ae73855290a523c37ef63b9bd" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="de5b10e6795d06009086fe068d57c376fac7fe28cdee424dd1a474d6d33d0f19" name="krb5" arch="src">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="e6b2d6913c914f621fbc13ef6bac6ab6382c313b284a8c5787e7d9d97d4dc137" name="krb5-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="519df648b733da90572578b2ac9d4d49c5031c7a54213f47a62251de7ad9136d" name="krb5-debuginfo" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="74a8c003cc5132c75745ce955f42c64354fab34f6486cb8fcfccd7871ad96b20" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="627d245e4e07acbb30eadd6f51616054ad6e013d9518f058ff06db100bcb9463" name="krb5-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="f0d51ff31b4eb4a74974c589a4d2e643e23aec6fa4bbf80079961e1f3bc575b0" name="krb5-devel" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="6b90bbafd44b96c4904d404caa2e42a24b786faf1582640307bbe52e073d6c19" name="krb5-devel" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="261f39df622a0abe8c31a6a41ad2ee9d22558c6f36e4d8ca280ceca3a037a948" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="2eb52b45c328b72b4c1bdd373c02e8b84edbf18e54cb594387d17cd3e88a75e4" name="krb5-devel" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="429ff43172a2b94bee1bd4b3c4af110c06534b4445c8a16ddfd5298afe99d3a1" name="krb5-libs" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="58eb110aa16eba64023ed07d9950fd18067ff4c27e4a24920841870256ecf681" name="krb5-libs" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="2ec10a4ffdf315de17c8e7653b4b061e6b0a4afe1d292791dddcacdf1e704d1c" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="ab3519fbd1b33b995cc86447d4101f6531587b8434d6558ac40b66279e57a6d3" name="krb5-libs" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="19277ac807c682d36a2c6b6255f996950b2dd8a02ea92909ae53bbae6272ca4f" name="krb5-pkinit" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="45892a9b42ae8062a320d3dd7f056fb2d62b532e9cb94dca0cc24c1f1df38afc" name="krb5-pkinit" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="68c084891513b57327a17d3bc112f2fec99a07ee164c37d089597cb235102a36" name="krb5-pkinit" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="e5999c43b64ae50feb3628f6b8548aa9a2a18b53d29cb96470d93d09479b67f6" name="krb5-pkinit" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="1e10cb36b80de904b1ad6b09d273201046e1f3dc010594b490d1bf2c27d0037f" name="krb5-server" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="0b20fdac1822fd1e7cb7886df7aa7028fb00c02f473215f19770e3260fea7257" name="krb5-server" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="1474c0550b1b64ad48753e1638bb51bac7db3ed405620df8eb1d11733ee898a9" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="09939dce004ec21da6533f06669ccbe0a390cbe8f619b3005985319032a46ef0" name="krb5-server" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="c84801ffa21c96ee9be7ae85c879fda71698170184362f854f4c77c9b02976ba" name="krb5-server-ldap" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="c0ad749cbf163624eb000c5140dec97e52a245da9ad70d4c78999817030c9646" name="krb5-server-ldap" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="a1e4fc0e53566785e749bf30e15b9192677ece6cc4f2982b04c898aec24d76bf" name="krb5-server-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="f541276a332e87d16aa080327b466cbb447d401857a8d1e0eabf7e4e8dabd85f" name="krb5-server-ldap" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="64adc56f001a085501e530c991fc2aa11e1708ee521cc456a2413fced94a7f56" name="krb5-workstation" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="9e64788399a02a3611b7b9c70356e219a34e4092244fb8808eb91bfb9925aab1" name="krb5-workstation" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="c38a1620a19278cba9e8964a614fcc80427581539b45ee084d22aa82c123a6eb" name="krb5-workstation" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="44a8033e472c6f3480c35937d00fb7cfc16c4d168b1649de887a85eccf7ac6cf" name="krb5-workstation" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="8f38fa0255228a870e03da713851a7532bdc214406f3382d96c9b6504c8b7ed7" name="libasan" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="92323a4620b8303fc590dd8dc773af222937a7279ae0d23fef71390372c9f65a" name="libasan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="4f685efb1bd2b368aa76d310392c8d703b0d68319828d2af58be9cc58e8d11dd" name="libasan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="8bc8602273452625d4bea1c831a0c278128f683caec74735734fa24f91aad5f1" name="libasan-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="d80e7b20aa986e48c1cfd8ec3161607e07c2ca59bc16561981957c91406db6b9" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="b20e4cddca352b3dcff84f943254f70e4811e5459323346d31ade725f13b8971" name="libasan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="8b87dba217d7ac6a92282b64b1f4f5f8aac5797034d52ac8a796279fab28ff6b" name="libatomic" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="4d8ea9d16cb4fb265250ae4ca5e5650eb5bcc49d47a6784f30eb43a88d2a9796" name="libatomic" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="b06f2e0a918879d4586ccf79190a61ec45eb4d39e4a63708c8ce05b7e9ddb50b" name="libatomic" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="c0308fe2673a0b33abe7887e7163cfad0cf323b3ce17c8915b3109afcaaca145" name="libatomic-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="faf6b65a53cfa6b89a9dad073182527790533f9a8d1934dcb5c7278ab6ecf6b1" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="5bf7836a85f91b6a19c272340ea38d7cbda17279413ae56b362a6d184a5bf354" name="libatomic-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="26d9c2b7cccc77be7bcaa70333e966995d81107f5a3327c6982dd8d8dd2d4e27" name="libcilkrts" arch="i686">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="0a0d3dda0e07ec291e9fe51a793d5371578ade4a4b59f5059a8bac3138b7bc15" name="libcilkrts" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="223540560868fea0744ee3ce61ca115fb0544d3d669dcaef658b527f60c9e129" name="libcmocka" arch="i686">
  <version epoch="0" ver="1.0.1" rel="1.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-2" date="1358424000">- Fixed Source URL.
- Fixed package groups.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-3" date="1358510400">- Fixed typo in Source URL.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
</package>
<package pkgid="f4d9c61da28277e19600edad140f3f64676d5cf15a7afcbc5ad102191656482a" name="libcmocka" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="1.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-2" date="1358424000">- Fixed Source URL.
- Fixed package groups.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-3" date="1358510400">- Fixed typo in Source URL.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
</package>
<package pkgid="255efe632043c76e0b6910b63ed581a807f8fad5120d6e98daef28c0bf5ecbd1" name="libcmocka-devel" arch="i686">
  <version epoch="0" ver="1.0.1" rel="1.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-2" date="1358424000">- Fixed Source URL.
- Fixed package groups.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-3" date="1358510400">- Fixed typo in Source URL.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
</package>
<package pkgid="34f8caef83930af189bd60a67ec064309453bee0c5dde07497e9ea14fc82a13f" name="libcmocka-devel" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="1.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-2" date="1358424000">- Fixed Source URL.
- Fixed package groups.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-3" date="1358510400">- Fixed typo in Source URL.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
</package>
<package pkgid="228e3d7aec9ef706538592fa8ba65c6e355a0d337088b48946cf01748667f3e6" name="libcmocka-static" arch="i686">
  <version epoch="0" ver="1.0.1" rel="1.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-2" date="1358424000">- Fixed Source URL.
- Fixed package groups.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-3" date="1358510400">- Fixed typo in Source URL.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
</package>
<package pkgid="d8033ca020a18d484a9901ff276e63d3c8aa8adf48261bd73f836498d73d81fc" name="libcmocka-static" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="1.el7"/>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-2" date="1358424000">- Fixed Source URL.
- Fixed package groups.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.2.0-3" date="1358510400">- Fixed typo in Source URL.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
</package>
<package pkgid="86741a641df181f5a31d658c9359ecf684f65e25a96029379e367d967c801723" name="libcom_err" arch="i686">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="89a0f735af4448d9c9f9914d03d9881e529391543c9ff31d2c2e70e36fcfde4e" name="libcom_err" arch="x86_64">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="066d462372482da61427fc3874554de399cbbbc4ccc663e0700c83086d0caf0e" name="libcom_err-devel" arch="i686">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="cfd828078e96250f8c9673f744586dfdeb2041f422117221df37776edadf9486" name="libcom_err-devel" arch="x86_64">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="3afbdd9e589124364e9c9ae3b7986c369298afcf705360752b643da319e9e678" name="libdmmp" arch="i686">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="a0953595032ac6b0d84307d765663800e8a1d7ec132c8ff1ff8c78540654356a" name="libdmmp" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="9d57c618926fabad95e54f0a788bda414d96ca8e096a2cbc4db6d6c82a71478e" name="libdmmp-devel" arch="i686">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="d07c0e62ac559374cca44ae002f1c132517300ddbc2ab22e4d484a58a9060ef8" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="6b36b616e6ab7dbf0b08c87ef0f1cf1aa99da4dae184227747ec007d9aa4b1a0" name="libepoxy" arch="i686">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="38188dda6d98b34d03ed4397deab53f677c974230058a5b8e0274aed7ca33cca" name="libepoxy" arch="src">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="26afd127a2890e3faea3eb4391ebb9cac7cd3496dbd11fc4f0bd254faba70131" name="libepoxy" arch="src">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="a041e868e7ec2bfd8f43775188ce872fc4b2c8c9a8edbf2426cdf8d65859e67b" name="libepoxy" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="d37f778137f6d8399fb86b4b5313695a1f78bc78016f36d0e7ffa353a1ee6fe4" name="libepoxy-debuginfo" arch="i686">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="ec14ce569a1a0014fce3521e7dfede625dbf0b487dd1a87fedff451e292b5652" name="libepoxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="458399083719de05a47f97b617332deafae66d41730ba478df38015fc7fbc2c2" name="libepoxy-devel" arch="i686">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="2d79be0fdbac2bd42df4af0dcbc19b7970e52ce181f107b08cb6681fceec1db0" name="libepoxy-devel" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="7ba74356c2155ea0eea639c2dcded93b2dcf00d0978874e8ff138783b3c2c50c" name="libgcc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="da70fdfb832901ae6e06dbadd514abb9f3e4aaf525d9c3de094bb95f83ab69d2" name="libgcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="a67f8fabb6fca1018bf54b2d8529802e8127f27212a000e83dbe2254edf78ed8" name="libgcc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="16d1ef6a62a314fbb431ce955a695bfb0a472836ff1a080fe16cccb30d639e58" name="libgfortran" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="85dc86073935a56fcc9b9f6d191092336af4af60235e2426ddfb0634c289910b" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="0a388a92d0b274b6cb9db0df1870ac439db63d8021c240b0e1fe7fc0e5201bca" name="libgfortran" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="e558db8d6c01b5c2d2783257fbdef4c737d657e57d167423f9f0ef8c6f4fe995" name="libgfortran-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="c80cdc82bc5caae12f0b27a5bb185a7d55804da3f4e59abb6e73e3e8f349802e" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="41b98d379c9d678a351513eb5a59d67eab17b1bb6435dfac45b1cde3169fbc15" name="libgfortran-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="ff2d51db4e1e4c40e35eef26745bb3c11f70a32b6ea5b4d8588b058bf0d7b063" name="libgfortran4" arch="i686">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="6c23ba65459c635660837c4cc6b24c72b53256a199ab13db89b7290fc87324cc" name="libgfortran4" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="ac84279afaf8598276d9db8326304d63c3c8ae267fb6939c23ea5caa69d35da1" name="libgnat" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="ba02a6424bde5e54262d9fb9a97d1fe69b05644839a55433263a246863a129cc" name="libgnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="98f4fe66394f809edd17ac2eb937d9db9eb52e6d3b083c4d97ab47a6761c2071" name="libgnat" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="9fef63df8f3650cb6143372609800f07d8c233a34e095b573552b185b49956aa" name="libgnat-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="dcfab103fbd702b16aced2feeba04803671ec78afd203a28380a618fe3347c54" name="libgnat-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="8711fa801542225c98e6edd00663016892555353507c79373aee35d86f51aa1d" name="libgnat-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="3bdee85bcdce09e5411706aee71db3e5e0e74435c1939d0170a04187c4061895" name="libgnat-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="0191cc190e67e726f874bb3b8140e06eadd50647162fc9aeeb1be28ece5aca1a" name="libgnat-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="0ee63d49096d7abbe19905d615eeccf9cbf4f87cfe25462690b312c721139d40" name="libgnat-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="325e701f996ae9a83b0a96fe46e5817328a6e043e0d604d73ca49cb15e8cc5cd" name="libgo" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="1221d209ff7155baa74fe7134f63e7dda29aaa8d6434b178abbd7f94a97ffe45" name="libgo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="9fa16fffef9b241564ebcc34d9d12763f3f6d0664c5c1103da8b4fab5267a4f9" name="libgo" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="c31cbf68370cef756abfc1d7ab48f5e37d6d52ef2efdf96ee3acfa393bb7083b" name="libgo-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="046f33e1344090196e770339410053cb94bcd32e920d748902196b6ad7982e76" name="libgo-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="5890acc15a11201700654edbe3c9d22b156965f7580d98b26350f6f26d4b7818" name="libgo-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="29363f6ddd95034881a8823ea74832d29809ae5eb0d9a7ad4e12eb8356f680cf" name="libgo-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="a07b5c57b3e43b35b779d2f91fed368d665a1a2c57f34cb55ad753c85e129bfc" name="libgo-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="d97152e0cc1b890d7f67b19aca60fe580e2eb15bb3bffa46dbd4dc3205e5fc71" name="libgo-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="a2974c91bdb3487b8096b9e6890b8f0d20583bb5e1d0dbb793c5b8c9b28486a5" name="libgomp" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="4833b9c2b76aa65a928a90b32174b168637b39f87dbe68dce71ed2bb5b539e04" name="libgomp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="a082f7a0a1bac6ba328505da1f3824fd1d362b0a7eeccce60de28482588a0aac" name="libgomp" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="49b3ec232d5433f66cff82c94134d77a92b73ea1b857294355b612290963a0dd" name="libguestfs" arch="src">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="e3493f63236df64f4bd3f0004d2ce9fcb4ba502b2a8b5b20aaed4b6821d227a9" name="libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="bcdcb371d8e5c3dfabf2fc3238ec191e0b37f50a03d40535c59ebe0c44a26a51" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="c11a6801833302248f51b512189816c888555bb425c628d6ed82a493971e95e4" name="libguestfs-benchmarking" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="bff289f107ee4588a09900e5a0b7538240f0749cb45724559c27c28f2de59131" name="libguestfs-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="18ce6a15225889bc9ba10e1049006a356d6085e52f64b2d953b97564e459eb7b" name="libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="1767310f2868128ef764e2da4d9173f695f24f0628ec06d671b877fbae191c09" name="libguestfs-gfs2" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="f9b010177e9d2157fdf9158d4c221bf8f61aca136d7fa7f37bcca8f7b1400a87" name="libguestfs-gobject" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="a55922555a4c84b8a9d5cfe4767ca097218c8a24f0ac4305a2bae7759906c102" name="libguestfs-gobject-devel" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="9fdf3e72a332cd3ad47af4d6408b2f25873d703553ad81094c0b28dc69b94165" name="libguestfs-gobject-doc" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="f778e6f7a84efee5763c772b7a5f2cb5242ef65bdad30a6ca57e84ed50c4eb27" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="32d9c1d9750a7f8ed1c79a30c457c30438540f6a6a961dfe8e2471ea573248ae" name="libguestfs-java" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="204e0bb2fe56ed401bd319a916ddbffe2e1fc2917138cbee578564022d8ad8fa" name="libguestfs-java-devel" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="aa9fa28b2a101b51f62aa7dba10a9c0eda1a3ae3de8a8f79636bca88d5e0a78d" name="libguestfs-javadoc" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="32e1213e84aac876a20b5ae60a0e7f7f1b2d14a31da6e2aa0b8cec6eefd2035a" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="0274d0bcef6febafbae37cb0e828814551b8951e259acfebb1733028537f4838" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="6dc6a120e2bcd4f67357bc4cb1c77c6b55f8cab8a6dfb2a1dd4a479763245b0a" name="libguestfs-rescue" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="0b9d19a0ce0909412d81814b903e886063fbc1259b8eabbd5b5a1bb563f50c31" name="libguestfs-rsync" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="c00c36574431141b31b1f61bbbf367a4034e2eb302cfdf5c3851cbb85b652276" name="libguestfs-tools" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="498b14bfce3bcd12566e58b85bead9489555d0c1b5c70086b8fbbdf607fde366" name="libguestfs-tools-c" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="92d50e7fdb629192469e3e89370f3cff6ec056ec1d6153862ffe1cd5015b9ebd" name="libguestfs-xfs" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="e4548326604e32765ee012ebbe606665394ce63bf08bf322b5ef27f45325431f" name="libibcm" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="c0ecb580d564888ce1b99228c8ac8d2b653e99c6a43f133482784404ee7035e4" name="libibcm" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="db2e3e2538086337d00eca83d0ecaf3f051d575364d0dccc6eaa0fbc4d2df466" name="libibumad" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="977525137ff7ac23a6ad1c48b13e462b23a1b83f65da55f2c837345fdfaaf356" name="libibumad" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="887739d200de25f997c83b837f65952bc96913300280394c0ae6a6175394fc1d" name="libibverbs" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="8b54b985be7e56c7b3f2f2e9c1af1fbfbd41bacf8ff688992b5a0c11a3f0a83f" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="05af02cad14339a1c448fe5c56cebdb83e72b4eb36aaca21cd242d07c9265f9a" name="libibverbs-utils" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="81802f7183572454db7b1029a1e0edf7dcf9991eda45aed635b8871b3cd255e3" name="libibverbs-utils" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="b6ab16e5963190ae58eebe1e0530efb1324970edc833be77b0223317d98e61e5" name="libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="20d7458e12ae9a82cfcbc9d36df66d4741d6447a587aaa2b5b5bc7607be23153" name="libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="6a6a00641f70d8483d733bfad5f5a04aea3578232cda0988be419a406c31ab47" name="libipa_hbac-devel" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="37dea8409839380824bda27b961ee2b71c976c53400892def5042d6db416bbc5" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="506d12215729571c7bf5fcaea2bb0df988305d6569ad06fbd264752d64e37d94" name="libitm" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="a2176826c2674715ad56c7f24575eed8c97a95a82639e4e52e4de724ed87387b" name="libitm" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="3a211d2f5a0295ce08de9e33b1370aa08869b94b95f74c32d0ea873686758f79" name="libitm" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="f136ae7255fc9af8b2a2c9d84642dbad0c77bdd673aba281b0abdaf5357e7928" name="libitm-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="348bee4192f1dfba2f469d6f40becb994f6ed75816571ec65ed8b8c66c93e984" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="56cb2cae02dd6949459ae8e31c644887215edd2b5ae0f980f1202388e141698c" name="libitm-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="990a6ae25a76b9069414b03e471e3b37b0239131cc02866cb62ac34014226cf2" name="libitm-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="ca0d616580dc429e4c627c943e5a54195b381f0164738eba740c98883df097df" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="43b06fe2efb796f4f07ee7870d5075b9fcb0ccdaafb8a56a581e273542174c99" name="libitm-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="54b18df96e27e0937a4eeb035e4fcf660122cb6488db91572e9dba1c91f3ba06" name="libkadm5" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="00f1213f976a0bbe269b5de35e82c8bbb967ab0deb8667ee281bb874fc9197c3" name="libkadm5" arch="i686">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="7300698b83d81db95238b125ed9c6d40859f6e0b1e06f4439caa672a2a2523da" name="libkadm5" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="8358fb3153fb9ae65fd38ca2a4bb216c882467768969eff5ecd84b5cf8a9f096" name="libkadm5" arch="x86_64">
  <version epoch="0" ver="1.15.1" rel="19.el7"/>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-10" date="1504612800">- Add context SSF query support
- Resolves: #1472956</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-11" date="1504699200">- Make t_certauth.py runnable
- Resolves: #1443388</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-12" date="1506427200">- Add krb5 policy plugin interface
- Remove soname downgrade
- Resolves: #1462982</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-13" date="1507032000">- Force-add /etc/krb5.conf.d so we can guarantee it exists
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-14" date="1507204800">- Fix CVE-2017-11368 (s4u2 request assertion failures)
- Resolves: #1498768</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-15" date="1507204801">- Fix CVE-2017-7562 (certauth eku bypass)
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-16" date="1509624000">- Drop irrelevant DIR trigger logic
- Resolves: #1431198</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-17" date="1509624001">- Drop certauth test changes that prevented runnig it
- Resolves: #1498767</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-18" date="1511870400">- Expose context errors in pkinit_server_plugin_init
- Resolves: #1460089</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 1.15.1-19" date="1519992000">- Limit ticket lifetime to 2^31-1 seconds
- Resolves: #1554723</changelog>
</package>
<package pkgid="50a867b5960e97b332bb9ba8f083ff9019c4edc00fe4a399c5021450628e7c4b" name="libmudflap" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="78c7af3c344756fe6b5b5957b99db1b3dd1165d93075441c12d59089431f3625" name="libmudflap" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="1ad1cebd167ee705d5fd80723b2b1b74620cae0018239b9cb3857fb7a856cf0e" name="libmudflap" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="c09651301e1904242cbd51aa8084ac0fb80109161d5f2278bbcfba49ac0b21e0" name="libmudflap-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="b1d341ee21b1435a8083b120bb699eca3ef275c3e4a37ce87fdb36b0241a1c5c" name="libmudflap-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="bbfb2e723793dcbff68c31b83600dfbdb00c4ee4f7c89ab2ea7ce7928f8f41ad" name="libmudflap-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="9f1081ab61f8cc72239d788d5a5c23133039d904b596a8cf2e4a838c4ce60e2b" name="libmudflap-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="60ac56747aa2fe33a6c584cdfaf57ce366a1579edc24004e5431445d86bcccb5" name="libmudflap-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="848fbc9597fad554b3d60bbb2650cf297b0fdb5b1e7af4bdf802fbddea7b857d" name="libmudflap-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="18ca093e158fbc8d2177ba37a760b0454b879f9e9efbcb78d31129af036aab6e" name="libobjc" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="6a5f87bed3a2b18642ff70360ff062a2c7a760dd86c9f84c7e71f5898afdd4d8" name="libobjc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="3fb480a1f59c8504f637c342c594a8a85ce59cddaf4d09b84652c267c1b6bb48" name="libobjc" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="6df050a95a714217e99d1ea719cafe9d4d5060f01f46c025eb66b22dcc3538a2" name="libquadmath" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="503d6b24de5719fbd9083c81cb82824a73c5381f6538da68b6d960f5990a4a1c" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="5ab12691badffa71b2146a3f7e9947811867fb3cff2d81d8a479dc2660b4715c" name="libquadmath" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="202638e8c38339d9c8f13ecad8ffc7d9e553517ca62b884e7a3a933c65cb9c2b" name="libquadmath-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="577d31ac2305b65cb972eb354c932d9bb5e01a3552946d3c7d998dd650074cc5" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="217483e84c216893aba387d4a6d8a94bbae56fdf8a82ab324f2b536c02bf8e30" name="libquadmath-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="b1df9ccba7cbd398b7ed84fbd1fc284136111afc795459311da0d9c0af375b66" name="libquadmath-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="9c1441bc25920372839e5fb17287b99009b482fab801b4450e4655b47c9a671d" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="8f7ae0a8ea7ab26e156d47988cf335050adf1054b3382763d9b415db92b3fdc0" name="libquadmath-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="225e838da8a44fd1a5df05024086dd0e396986004b942f424f8eee3d9e3ecf2c" name="librdmacm" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="894bf87003ed214205bd64ffdc824f0ff9a947de475342f483f89fae2b970b1e" name="librdmacm" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="58f8800d7c925423ef44f54b92382d19e907e871aad717ac6d8616fa9ad2f1dd" name="librdmacm-utils" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="f8481a9d01d039c0caea8ab78dfb93732fa491602f962d88c86294935919a368" name="librdmacm-utils" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="615d071497f354b2f1ee6cb0e4cbbed4083ac25fd5b0504286156c2367490726" name="librelp" arch="i686">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="6188be55cb625a2a3487dac5f859b86353f995bf0c285b2bf795fe872957531a" name="librelp" arch="i686">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="cb9e482c03ec21746abf488df98042792ac0a31fd772856ce2351376fe2a48b5" name="librelp" arch="src">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="b0a20bea2f5ed72d275f4d1351e26e64855eda288b512c1a63d1c0df620f11e2" name="librelp" arch="src">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="569022a46f6694d2706af385becdc708c3447c561dcc7679e3abfbe8e8b912ff" name="librelp" arch="src">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="253a8f4411dc3ae86762230619730792f48cff69a4cb28aab0767ee28b54f734" name="librelp" arch="src">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="ff9b7da1261122c228bae31f9d60aa2cb628d478241e74332714dab88d928d55" name="librelp" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="26885e73f79b2d62593cdadadc7ac1e867026433ef22c2d4e45bdcd64e8b56b6" name="librelp" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="52c9214734bc644996f571f27cf5dbb845e45ecd0cf53619f2b2c46dc3d33335" name="librelp-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="d8f3aaf034d488771e9798b0238d3d1c740465886a141256c7833318f2cacc90" name="librelp-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="37f4a858c9e2892704ef9a284cb900443732d249d5f1adb6182bf69ac7506e32" name="librelp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="46edf2aeadb4d0064997d05cb6ec692042d339c9a60d4789c8c4bbd3c4765b75" name="librelp-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="c81f78c14184a0172908b94122a9fce2d539ec90c21f53236252c50750e0afb3" name="librelp-devel" arch="i686">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="24e48c71e0df5a35f1d36c12ea4cac3ec97b7d7a43ff8417cee4f3e90d23b3d0" name="librelp-devel" arch="i686">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="2ad0d9660ef75d14af3d8b2920142e1abb294be18c68157c32f43c2b727bec88" name="librelp-devel" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="037b8bd55e906a20d332ac96a2ab37fc996c907822e5a34531068ea0a9a255bb" name="librelp-devel" arch="x86_64">
  <version epoch="0" ver="1.2.12" rel="1.el7_5.1"/>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.1-1" date="1353499200">- upgrade to upstream version 1.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.0.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.2-1" date="1365076800">- rebase to 1.0.2</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.0.3-1" date="1365595200">- rebase to 1.0.3</changelog>
  <changelog author="Tomas Heinrich &lt;theinric@redhat.com&gt; - 1.2.0-1" date="1375272000">- rebase to 1.2.0
- add gnutls-devel to BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.0-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1" date="1486987200">- rebase to 1.2.12
- inevitable update due to rsyslog rebase 
- resolves rhbz#1420716</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-2" date="1522238400">- fixed CVE-2018-1000140
- resolves rhbz#1561232</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.2.12-1.1" date="1522238401">- fixed bad NVR
- resolves rhbz#1561232</changelog>
</package>
<package pkgid="caabf24d18b8231040ba2268d6855a612ba707fa77d472b5464a2cd28e5cf150" name="libreswan" arch="i686">
  <version epoch="0" ver="3.23" rel="5.el7_5"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-2" date="1509451200">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
- Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-3" date="1510833600">- Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
- Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-4" date="1512043200">- Resolves: rhbz#1463062 NIC-card hardware offload support backport</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-5" date="1513080000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
- Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1525262400">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
- Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-5" date="1527249600">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode [spec file only update]</changelog>
</package>
<package pkgid="ced09d9e9af62131f9ac048b1c7405dc880a364903379ae65aeaf2dc9e2be07e" name="libreswan" arch="src">
  <version epoch="0" ver="3.23" rel="5.el7_5"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-2" date="1509451200">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
- Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-3" date="1510833600">- Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
- Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-4" date="1512043200">- Resolves: rhbz#1463062 NIC-card hardware offload support backport</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-5" date="1513080000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
- Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1525262400">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
- Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-5" date="1527249600">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode [spec file only update]</changelog>
</package>
<package pkgid="373d203ee1fb37654f89e567d7afa33fde6d9a088c88ef2738aa9c843cd02ae1" name="libreswan" arch="src">
  <version epoch="0" ver="3.23" rel="5.el7_5"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-2" date="1509451200">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
- Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-3" date="1510833600">- Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
- Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-4" date="1512043200">- Resolves: rhbz#1463062 NIC-card hardware offload support backport</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-5" date="1513080000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
- Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1525262400">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
- Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-5" date="1527249600">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode [spec file only update]</changelog>
</package>
<package pkgid="988cbadb384e2216eeddc71b57f8c4f999c0201347b2656ea241e5c51c94c638" name="libreswan" arch="x86_64">
  <version epoch="0" ver="3.23" rel="5.el7_5"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-2" date="1509451200">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
- Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-3" date="1510833600">- Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
- Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-4" date="1512043200">- Resolves: rhbz#1463062 NIC-card hardware offload support backport</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-5" date="1513080000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
- Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1525262400">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
- Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-5" date="1527249600">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode [spec file only update]</changelog>
</package>
<package pkgid="ab3f483a4cc1f3f9577303e56181f4d2580531506b69b884f1fc6984873bcf50" name="libreswan-debuginfo" arch="i686">
  <version epoch="0" ver="3.23" rel="5.el7_5"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-2" date="1509451200">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
- Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-3" date="1510833600">- Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
- Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-4" date="1512043200">- Resolves: rhbz#1463062 NIC-card hardware offload support backport</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-5" date="1513080000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
- Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1525262400">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
- Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-5" date="1527249600">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode [spec file only update]</changelog>
</package>
<package pkgid="28ba35b37ba7f36fa1600ede8f7d24806f0fdbb91bce4a5acce62349a1e6b2a7" name="libreswan-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.23" rel="5.el7_5"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-2" date="1509451200">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
- Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-3" date="1510833600">- Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
- Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-4" date="1512043200">- Resolves: rhbz#1463062 NIC-card hardware offload support backport</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-5" date="1513080000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
- Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1525262400">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
- Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-5" date="1527249600">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode [spec file only update]</changelog>
</package>
<package pkgid="675f6e6dc06181a35fe5dbb49bf02113d32e8b4cb62ba0541f5c88f9755e8c61" name="libss" arch="i686">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="a44460aa5b49986c2ab662ad108441d2a1f5a4c86bd5a6a9ef6fddc1adf14947" name="libss" arch="x86_64">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="2f58604522db9dbb8265168ab9295ca7cd6a9ae76e7af58755e73fef6b022b4a" name="libss-devel" arch="i686">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="63b78c1eb7f2b8e8ad0f10cc86384855f5356819a21c5d66cdbfcd4264e072de" name="libss-devel" arch="x86_64">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="e702cdfec1e5322ccc816b3fa4fa7ff2dbf05e4ab5909f1f4143e8371e4bc246" name="libsss_autofs" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="cbd6e54fa0d77555a03330b810e7a8c1d84f862302d41aac2f6ee16c8b031eca" name="libsss_autofs" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="02ef068f4aae4b4ef0332da199c95fe38184511168904a22d48a3f9990649149" name="libsss_certmap" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="d4a1b99053c7dab4f551f13dcfad4a103531ab4bbe910a4ba6d2507f25d42372" name="libsss_certmap" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="69ba451c40f2bd4fb673391237439dcf7dbc1b6096366dacc3c891f12c36bb37" name="libsss_certmap-devel" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="f5dfbc74f8f159304039221b3937185114e0712ab2bd403080db372e8ae64495" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="3a4788304b826d1eb2e83df7e3290a197a986b939eb8fcef8a371b3cb29a82bd" name="libsss_idmap" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="54bb586680f8da6d3329db3b5deedf937110bb12952dfc1876f77735d490f031" name="libsss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="1daa8ae75151667edf1bf031a560be41b2cf54cfeddbf80e765ceb66fde8266f" name="libsss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="d1e741df47c33492701022b8eafff3f4a5d5d4cef624f764be6dc22b1cc799d7" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="a03747005322122dd8811a9c1cdb7a1a401232ad9547936f3baf0d134f88f621" name="libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="ac16f7e6ee6adca1666561e6a90158995459696979311b953e589e330854358c" name="libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="c32275b8a86d81981e2025429c80ca2c652bcc51a80c475c3b6271a33784dfa0" name="libsss_nss_idmap-devel" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="2721ea5521089bc5c05250799f513757567fd899f49751e7b5ddb5900ae37891" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="a0a8123401d372e2286c5c05a6261114485be993b84f1386b6160bccd4f87e01" name="libsss_simpleifp" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="b49b043c22548538f725e4245252921278e9d6b15b08bf1bd0d1bbf6eecd72dd" name="libsss_simpleifp" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="411c47a84e4945c503fabaf5285bc19fd9d35f5343d9276fcaf09b7034d37aac" name="libsss_simpleifp-devel" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="cec8241866e89ed244cd712ffdcbe24238e74325bf3c97d6a5e4f0599a4bdf29" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="25e0f6e3e07c49e3c6bae26f0e13074176f7a0df3c61264265d4ef8492270e5d" name="libsss_sudo" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="94c80dd4592b4bf570e486c20a5ff7c050140ed81ec0dae6cedcb69c444a5234" name="libsss_sudo" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="f60e582433c667afffa816d606404166c8f2152c1e2ed10977e53017119943c8" name="libstdc++" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="737e5e25385e64724920433cf4e20767add3d71d82d0ae7596963070d806804b" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="62b26254b20384481885ff442ceedf4a6a4403e3aff426481fb6b0914c685a41" name="libstdc++" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="8e112ea1c2e3f0eadd6935d2a7ca4fbdf331dbf0d888c044942de1cbb4691aad" name="libstdc++-devel" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="3fd6cac88a1b2ec76e57cd31dc625ee959b02b3ee4d2e35ec7c45e07a19f28a3" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="7cc7f25c3f2bbee078170fb77014d7c23377afa2f53b53816e0393ba124fe1cc" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="3f87b7e3c2300eb35480de3cb07768d21bcb3400292be837ed02cacc67b25835" name="libstdc++-docs" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="3d397ff7c1f40441a48d343fa5b421f05cad2cd5fd6809015e42c9a74532a81c" name="libstdc++-docs" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="d6e6ffc67966e0e224d40cb39554844ef1dca88e2cd6ba32344c043af003f0fe" name="libstdc++-docs" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="b8abc005f2fa4dd23882e44512bdadd54e2c14ed19e787c866140771313711e3" name="libstdc++-static" arch="i686">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="35bb001ab8974867486330da278a966239e859438a9ab75c6159e08af5e40a81" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="0f43726c1fa02545cd2579b5f08033c107c65e5be959c0e11d54718d2601147e" name="libstdc++-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="5dfe4bf6d5166d232ee9a5056ee98cf25ebeb7aee17cade8ac9cfbf1adc49c2a" name="libtsan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="adf359650415cb23be70adf4e3935d61b4f0e407f2b3837f0c81f2391f6afb59" name="libtsan" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="ab9561f06cf8912d81bd36c71de82afc2958f722179d442ba8351918c87d2df6" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="56f6f86626a03a79123bcc2e51eebb25f300a4caec4d9d33d6bc65b0ec00d1ea" name="libtsan-static" arch="x86_64">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="41c679ac1735a4343764eeea9f66d548ecbace4edebedabafd3fcdb719902e73" name="libvirt" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="ed122f4faa30a9bcd8b715139e1cfac489e9de2dca4804db990286ed707d5ae1" name="libvirt" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="de846d0e330fa0cffa22c5eb1816cb81797c1efc538c1ba48afeaf31bcb4a111" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="f8d4862dfe873b11b3e0a6a61d17e2c0ccde4a5669102b4769e1a5883730a622" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="2bd49afd209690d749d5ded5b0ae9c184d6151c92066df665b7aca07f8990ba2" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="161eb97ad0bbfaa26b87a2162856c2a32f95f4c919d3499c65c63effe0800932" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="beaf0be41d97e93e646dc8cd5a27e2782846517c265a67b9cc85c1eeb09a0ece" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="d87f9969f3959758c58a60299e662f0ddaec0cf11b40120d1e9aa232548d884a" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="9791d5e77498ae0ed8e00744fe5ea56535cf234c994c2e83ef6a288214bce2e9" name="libvirt" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="43f3d8fb504a943eab06d58c980fc0ffc434478bffb3ab6af8996ddfaf5042de" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="9b06f21c9681f5bd946b15d983a5f09f1cf51cb455c9306ba45d24067f818c76" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="9db66bd109780a2b0ac8afa6f36cbf3883f58d056a34e2198f02741e0322de54" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="bbf377ec0f966666fa16f2b72ed2d78a230f00f622ccaa9dd516b8c346106d71" name="libvirt" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="b593be60838efc8f9432cd4aa6187f7d5767dee62077ffdc77584eaabaad4f6e" name="libvirt" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="bea511424b81f38d892a7fea5f4fdd2d9dc2999a29fb4bd5a62346b97e7f1114" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="dd6b105cdc159fb57254885f378fb0d0342cca46e26a9e1705cbbd59e43e43ca" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="6b4d673fc45c1012d459e68c4accc1c9ad41322c6f21b33429e66daf9f1d287e" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="21635d3064ad49f65f53282a27f54ecbacf4a13679d799384177488af625bd7f" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="12f9a86ce938e3c9d176e8e39f03689a06eafa5cb9dcdd9614a6a733af8fb418" name="libvirt" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="e53adb6f50f5a6a7a5ee31b8605e90e1c59a584e7c711d0bb7bf4912ba4403d9" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="2c7a0e49675c095814628eae1f8ac0478e3cb348620f1e0d2d81eed6ecd68548" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="0e18fff0fcfe9fa2573a132f762d1c91d204904ce3e998940430a01321325d7c" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="c612142521bb5ae60b0a0dd47aa7337a7ed0e779587ecf9930903a099701e4b9" name="libvirt" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="fe54d29285287395d6dd79f0ea7363a7d172bcbc478b342f2fe3036e3ed36e12" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="8ff0c73a062f9c91bc153910e305a7628401f29bb92436546d7843cc46e61f49" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="7fc6acc8e2a2c59ad4199ad967052c5c6a160f4cc6cb44a8e43463c4c7c9815d" name="libvirt" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="c014aef317a1901e9e8252c084c167f67015315892aa4482fe2f5e180890a2be" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="d62b7d0d4bc64b257bb76b66cc84c1f884c39912cd36a91fcaabe4032a0f1778" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="59458f3902d58da5679ca96c62c6e8e59ec66238fcb2bd26de5c53fdc7df2486" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="fc8fa893eb837690c8a8396fc65d51b03076d108eb4b597e61a5d9b5642b49db" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="fded900eec1ad5e6357d99896b5347d149459920670de474e478f3ee0575676f" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="bdc0c94fa984b6954b7963661bdef442cacae30b0d05961cc887a0f8f91d54d8" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="f479bbfb8176f32b68300cd6efbf4cb360d379772d4d497ae4fa153dbdfc3b3f" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="ace3ee20cfc6129ff432f39a43f889eaee8cd1b09213ddda66276eeb1b755216" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="96190bfc893e1358839083821bbf8817c1a4f863c038bfcc9454ebb333bdb3c7" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="d93cca65a9ce4e44caa6e3020627aed3597749d066024b9ac1833a08b6c7bae8" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="5e5acea4add951e1a66fd3cf49a6c22cfd70a17aad46b06e1a49d7aa9fedafb5" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="810a87df9fe4b0a14820b85692a007d05e9f0744438437dbf428e643346cd6fa" name="libvirt-admin" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="e1051e5b724f1e45eee21d94dac3a86cb15a0cf7ad654b64954d5bbe6558a0f5" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="6660f7c994acb483e053751d7f77dd6f0fe9db672c4583b8db8b58f14db6351f" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="ec2f2af51a1bb77cee61a8878438f742c2d72f2703a7e222b34601d7029ad17f" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="ef8e340f04dca77fa612699b165df9a78c37b4d71a7beb238a4d1c59f8b1249d" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="cd502e486ee852388e57ee949dcd1207cfcc888617c339ffa09c5ddd7069c5c4" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="a2d0e2a015b0aeb25c50a0d209b45c8a52200c9079611fb0624c61f1803befbd" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="463555a2ff8307c004caa7cf9dc6855b6c2d7eced94288d8460689a4f98b0482" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="a1ca4792188c0345c0c163c15faa1495df314db96866432a7a2e80a8b6fcd9fd" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="8c29bfb388edf7751ff84092ac46e7b3626fef637201ebd0e59260bd19f8b8a8" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="da2c871b6ba8951786e859966027a49c35bf5edbe123a1c4c156b0e395bc061e" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="71f8f74966a135ace2fc0129855ab093ad08029719e70f72c0252dfad70bb620" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="c5f78bcc7ec5c3fff9b675893dcced973d2c17df1a55229a539b60610ec1c251" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="ece54be8ce238aa77f66166fc9bb125eb90f3c37f5f2fc2ed5ff7a5442cbd058" name="libvirt-client" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="e09efe45aa357ce94bf896ae743bc15fd22f5b7ae3130c29f04af744134b6c37" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="df677043beac4874b37c5a4ed8435b8be5f6b07c57de31a49930640e9261ee61" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="ed30e6858c8882805be551e0509391c9ce193acd31c984faad01c664f44aa659" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="63a114ca85a5db6f7d70e39ab52e95eeb8f07c260dd9f1e0e43fc60c34a8feed" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="bbd3e925366f38096237089fc2cf80c1f0dc251097c64ec88074a5b6aa4d08cb" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="4f5bc44dd1464836c688e70215306ea66f0d165bc236d638850114128fa7da95" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="b3a7f599a37aa64dac0f34b215a49db4196777a99e8027cdc7dd66692cd65fd3" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="fff52a39ab548f6ab099f07e63e67734e0e714c29a16474bc66bbed9f55f7bef" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="2e565b4310d99708416d2457ac90be915565e028a359eadcc2f20a646afc9fdc" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="53cc8097c94c6a9cf9d3b2a39820500bc998e03aa3a0effaffc0f391c3540aad" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="5f06264a9a85704296b801f9f5ce7a1747c092e4e2eccee12d28b4f3d0cdacd6" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="73a1ee8eee7dbdefd95de5bed3c871680e5b26ed7eed9fdc48d600a0a7df6553" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="bf01ff8d00cde3ddb27d3a8d103d505607059bfb13cbc82d0ff2fca26f3ca6f8" name="libvirt-daemon" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="a7d87fdd490073c536c7498d2e8e93ba3509d9f4e761870efc335ee7d8206eab" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="c10276b6ade3d103898302522b0119315d6e7a2d93c66e107e8fa943efcfe51e" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="185a6cbf843538e77df604a07a59be03f8b8d5d125d78d06e85700dddeb4b463" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="6d4f46a9f56f46eb9cc6d1773510e1c088eceec507315ec478ab076af433304c" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="124dd9bb047502a97032d4f9d499f78f4b2e16c78dab3136a8f9abf918fc1959" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="3119f8bf40e0ba197243c7118e351a8afbef6b1e72f1d3f03f89abc5a124bd9b" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="d13baeaeccd92911da94e7ff2cf444678f82a93bfefd94fa1d2cfa45f62865c9" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="bd5c2d5cf962705371fc38ee2a9397ba038347662ce677facbea92814a5a09bc" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="76f69a9e9f384979e3b7d6126ec7f4958fc8de7a5b298aaebff97c7fc5d86911" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="0c47d5b0f076787918cbd4b345bd5722719425482a869c1d85a4febf690827bc" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="b5fa63848b5af538c6b43aab3f8334c0b1ce73007fd2279c506d632c417a63a8" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="6e2d8dfb31dc0be0c6e07e5fce8c605f967db6fce993692f5dd9dd60d59e7844" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="eacdbd4d7f1fa3de102d3aaebc848f265c75602499678ee84f419a103f66c989" name="libvirt-daemon-config-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="b66b0ee51dd15f7fdf7614c4f7afc4e1df9ba8d573b0274a67721e4fc03beedc" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="e835f990ee97ea4a41c59ec909c5d35d141427b28457dac9b83888786db9e8cb" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="e3c7f2401e760faeafab223a0705a3b0919ea3857cfa178cb8f175eaab551cd9" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="a0bd0284f78644800a45db7f4632891a77e91de765407e00ba96145118bd57b2" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="e1e23d424c291e9c08e4dcd06a62c58b84230785523c8e908096fc2673b83ae9" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="48e879ac959e75bc7046033f64690104ff4e513e5f19fe785d0b0f0b222c9beb" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="a5f79db5495da527636a8e1ac8849b4b1cfb90a2af261b26f9f47e0541b5ddc1" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="989886d0ee7e5877899ee51c9842380868338fb198220402218bb59c7e2d5d6c" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="2a329681437599b428fde50236d7a87e515b80e745bff2d6102f2425a88a5a7c" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="6991e5e45be4472177d98debfdcde65b5f3178a31e3a00066197a403f4798ed2" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="faedf75b770c59d80a6a4f20c9e3cff7b3621c5584cd4ef4314f0392e2812a29" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="e31ea33c905e4d1c6a4de771ad3f8f6d85119cc7ecf7052f64a916aa31167eba" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="3a600da64ef36057f2e1f56332c4cd61a62ccb74c15d13e89c72a534f5d6dab3" name="libvirt-daemon-config-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="cecd9de2583b07dd033bbbd667eaadec89880ff2f40dce40e33d04be2ec6a267" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="b0613fa957b15555ddb0b348e1cd0c73ee5d682bf9bba345fa4c91980c85496e" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="0ec6b339733076f5836ac07e955f967f57af9665dd8471511a1126b7ef3ef113" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="fc1790c8626a8a53c25ee481e0adc41368f639df973f26703947b77fe7b3f7a4" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="e0ed493a2ba500eb8a38e9199c54903df6312e6ed5b4329472d1939704bdc4f4" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="27c964d892d0f9d077f477c9f2aee0ea70dca7c132e742cfe1ccfc13391e4a1a" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="e6c15b1bc5d6d4cadddb4bf2c23b107413fcbcfc12ef52e2876608f1b0a3f980" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="6c2b5afeb2227d732a9e13fef501f3abc763a2595d698399c0288067dbbf64ac" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="9d15a2dd0604ef3deed8eb749c0bf0e1855e9769289528fcabe7fa72337fbe3a" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="f511969c346630135376df7eeb8b6cf39b37dc7da5d600ec9f6109ec2e4debd1" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="a83e2df41b8ede9b78417cabf4764e500641ad62c3c8f31833685de50d051298" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="43d237457a33d11ca3571e0df7620eb887ec26cd8a3556c3c866c4885e374cf1" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="81514414261d1fb3392fa755811b8b34babbeb3d7e5146a384d8e1d7c57ffed6" name="libvirt-daemon-driver-interface" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="405a6dcd2a2e07c0385e62ff713966a9b34d48976125ec14f10108edb4b9089d" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="7be314f79fd077a7aeabd7cf901ab5efbd902bb3aa1e0cf37130549a3911f3a7" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="9aa34effa54049323ebed0cbb897b850e82373db462abd1b0d5f20720ffd5f92" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="d569a3a3dbdfcc224155f3b97ad06a17907ae97c83f5db64341435fc6662ff62" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="c742d1bd0af84a043091ed2561e3d611f22911a3ca02a20a35f63e8f6bac8bd2" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="5b404c8bab43fd495d1cf76c9711c8bc63c681250d1b71e6ad894630ea3c11d8" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="df8c53cef76d79b2515ab872dd2911e90c617e4d7b6865f3220be5e7f6819218" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="8d1df4e3e217ff17c35fdac3525af805522119ad51b42a6018f21bcfb34b31ed" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="02343dd0e470daa2b64e8806fbb7007f6e2294a7417706b043c4ff281e653ab4" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="9b5be2d0986752e779526695776289999c288deed66308e0f52100e5e6c159a5" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="e219f485b45cc2733f92cff880cb353d5c7fc5c6028071d420cbeed2238bb9a0" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="bd3bbfd48160d20df6b3fe4a982a4ce519a85214ef36a4b68a975ff2b1092290" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="f6663d9f522160198eb5bbc06243bb44ce85c21f5b953cd9215ab39e430b2dbd" name="libvirt-daemon-driver-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="c393cf785f9f0973b09bf4ea1d4a68f28c573915a6a4b1972b2c80995178a495" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="4c3353b57209570153d94e44a7276408ddb43d36c024abf75353f28bf14a31e8" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="163c69d437be980bbcbd537678f2efe83e77e627612a626d5aa26c90e0b7ce17" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="0e031d7734e20f0e7276a1667b6f0378985e6b8443c285fee596f4b95d2299b5" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="fd28a26972fbb3789776a751881dd97f596dda3b9c32d79aae9c8ce3947a1acd" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="ed370ccbdf73c0d242dd8afe1d5f53396f5baef4f47a220a9e3d209aed61c82d" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="40c5292b7a69a8dd09d498ca1ff08da4a9d67bb608465a7b021c24e12e0fe90c" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="5c6dc638d48c8338f813f6605b19d6fd393e6a0438de9497871b69e17ff9ca21" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="f5cba543e1a42dce3fe8f16f6ec14eb9f7bfe7f72b59cd1fc23358ea7457b945" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="561e97c7591b3d776f9dd6031d681bd05b07e91428c2b1af8b8556772a38bb22" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="5218b415fdd2e1c87cdcf1b64f0482a4786ab8ee2dc662a540627cfdc9ce7434" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="6051c79935b7059fead900348a4a47d1503bedb245e809bc1d7f1157f94ea5b5" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="67a062f142b548438c2d089c9fc6b5b650f7e0b7f063612950c244d5460cf72e" name="libvirt-daemon-driver-network" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="f4c8a0b58f8dc72e353d6778814932a88813d21acb27f8c512b0387e85a65406" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="2db483979ea78be3622aebe57f2298d30db08d69716cfe204b089f3e512bf968" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="c0205824f6e3b4a3578c38684b9f23fa62acd74147ef72cc1bc032d766c3c45f" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="906d57c2785d65306c063d88f71fbace21c694454c535e31d6b4211f6a3cb949" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="ddd8d6f76c0983b6fcc3983ca654bd71f27ca6953f7d53c3107e99efce5be151" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="20b04bd951daece2a2ab033d6cdeac9dc055f5c3ea756e3c73605180f561a03a" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="7ad7f45a3ff65ce7134a6d97a94beb8294a0727531bb5dd7f1494293c8b655c6" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="04fcf8bd42d5245bae3e0a2f6a1870d53fc27367b59ae7f61fe1b3ee83462be4" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="ad54534ca883979e82221807d2fe7a90227abbb5e971be73d27a1a416cc6aded" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="405db440b17a1e4a685015e5ca4c2d7639c3693dbfe6601a509d1f9653ed6a6a" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="975b4eaa9119cbe754f9079e5ecc4845d2e7115a582d9bc1ee747efdaa874b87" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="312c84afa7933c2f85228a0736fbcab7e1cd9270050b6257aa3562284dd4122e" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="79264ae62fd8ff29ed93711e3bd819c0b18efbd9e514ca9d289ffbb5e0ce0fa4" name="libvirt-daemon-driver-nodedev" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="e736be00fd47c468f1c706f5bb9ac0e42d90a2f9caa1467f6bab8987ccfeecda" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="5758033cef2faff1cff1ece6e3f5929374d9e00daf42dcf560a9deb175fe6ec5" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="2ee6e28ddf723c55cf99ff22028bf418bdc8c0eb72c878d9d6785902ca04f66a" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="e0ffa4d36bc2bb43efe2cd948653d297cc6a974349ca67aab332594e809c2204" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="a6af33a609fe791d9347c48053e2514d3107e908106a8e08c40cd9f7760fec3a" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="d17611d594e03df82c20b76883880b30e2770b700101b35f2f1c653939c3b3cd" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="a7651bebb2261fde616d98cfc39a091b1ade0bfe35c190df2f3c0af22e0a8714" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="5df7184bd814ae730a4bf8cffe42bdc3e2cff302e4ba5b11ae937df2c889efe2" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="e905340d62264b6682c8afb8ee6186c7a6c9315b68b29a155cd7852e264f8b95" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="01603d772c4aa30ab602bf240bcd8593e23d602b6bf20cc0686edf8b3095917e" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="ecb137d6a21b1b29088512f8dd7d4ae83508ee07c5761d3c562d8a15572e26d2" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="f61467d670cf37e3f680ad4345ee717fd35c178bbec630d5de0cb0acbebe6081" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="80dd609d27d8ad786e5bdec15d9e1a5466a722f6491bdc0c6324c9bea695a1e8" name="libvirt-daemon-driver-nwfilter" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="dc5dadac50d8dd07856d5cacb03411982b357370be10812b400bb4de33e347f0" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="848608543c7d1b20ad707416985f24f64e289140433dbf2eda6b927d4a1e1121" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="2aadeb56c1e9924ef10bd985fd305dc5401a24506772b30c1b2c7e23a1877d45" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="2bfea20a0089dfc6389c5f9ee5b3011996789e5787357dfe6da81d2a83b23c60" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="b453bdcb2142d673449b7e10a9d9ca790eac515bd70921457bcd6d12b13ae34a" name="libvirt-daemon-driver-qemu" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="2383b6b2d11a14488df59307076263b30bb8091956bdad02f24f5447dc7029d3" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="e3c6bd76f3e026e3cc910d6de22dd29096789e189b5ceea3ba7211c2ffab1967" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="a813bd3884854b45b68f47f7be453bf13f2804f06856bc492f18b200d45f9c50" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="2ea8d0b493a0b6619a58d1ef91076531a59e967b7e79edb977cfee91fab3b8a3" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="88fe0c514c88171d483008cbf8355d742f07477afb17a9e4a87413f98cbda63a" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="c3d0ea859f0b241b1de982cf654090a8b993252239c45a19fee0abfa2a8814e1" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="f7d0d86b7ac2a077c622fbba1812d4bf94ba4c5e1c5b8e1233e7f8417262ad8d" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="0e3637830012ec6379b1c1da154f971328f4f62a1fcdc599897f27b7c17fdcf2" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="80b4442b7200d574f69c0fd49d0187c45b930f6b5ec774a8efc0f910ca1cbeaa" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="f7a28de6c6bb8e72d84151999343e1bc41b965bb5d6a1b8074488389a27c48c6" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="3f6bc5cfb01e2b2f604a4c3f0495001ed192a7cea885ef8d7e4087112c11d299" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="46d90996cf09f2ef92b97dd2dde529f3ba8b9c835e3459c2db9da23dc9362c8b" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="684d010088e0b80accc092d98df2b7233b1ae254db0f46ebec66dc266e88cfbe" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="f5961128a26e9a584cce70d4b889733b7d74e50763d1810eab4754c554c7764c" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="abca555b318bd9a6a32e3e80912fcdab09871ba072e5c8608be5b5e46bf19b4a" name="libvirt-daemon-driver-secret" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="0000ddb24f7354e7616daec8031df9c5049bad3b4f884434ee144b55c0edc3c7" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="ae0c650879e5c8249d1fac201dd7963566754bf6e1e151ad4d489f75530cf1b6" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="cb8f119e560dafdc82ff9cca000af83f7fe4e1bd5ae33605fd4c0eddf34fa12c" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="bee59bf53c3b412298d7c2cf209a645f8d729736e22df99e5f85b1b6eff6bad9" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="a46fe2ac56c7051b4eba31a8d23a71e0e6eed98608d9ef6a23aa07e5215d495e" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="57724b6d6e0cae54cf2dcfd29613c2c256a695e4d6ec386899ae55b1deaa740e" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="a76e2cc7b3949e6048f0dc1007c69a973d014c968e1e677b34b990fa23c4ffbb" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="bbd1c365601275faca63d2634548f91782b3ec6fa5ce336b9a29fb9656960033" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="34707bbc8de413a67d7c18581c28a8d875fd040fff035a9cd9c3dbd391bdd155" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="fb945953d88a931cf8c64659231bcab2eb211ade4be7d153061a28da467d5d30" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="e3e90e18d34796742765102bdc60ca50f95818c5ef2efd147350a8967e3f8cd5" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="0070bc422af98be7b6906ab7060057301626130296852cdd41743f55a33c0423" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="da6f947d25f8e7f6be0e1fdcb8c7d364d1d05a1e7aac58c266ce2f75149fb013" name="libvirt-daemon-driver-storage" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="85653f9dbfaf097f897a548868b82ae000f88b55c8ba5f2ebc3ecc9ce7b257ee" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="e790df8a99b69a2267018b029c9796b08047344b1e8ce4b731881abe0fbd8519" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="fc3bc9a7571ba3f20d231322fbe50a863ae252faeedf69832685b9445b89bbc5" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="b74472cdff558eaa9d357d20771a20104036c67c10999198b39be9bc29179630" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="298af4054b0bb303a739c3465f78bfb99658ff31a126ba5b739e6809fe240f7f" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="e0337fe82743a806e16b78b2c3c76d857fe24d6259c82418b8aa073f3b3e078f" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="1f552608de60736795d50e4a1affc0b13dcbeee78a31527cadbd170b5d62d7ed" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="37426b821a01ce268f50fa1d1e815d2e237d4dea8c7838d4ee9727d8e897e0cb" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="cafbbe095e856db90b6da7525cfe543fadd1f1d750f62562578a65778d3747e0" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="708552f18f5e39c9175be152a83259611d710f45f1e597dabaa089608545bbea" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="0e690aa430b18a30591c2e43996baf38748936b3665c49a2890c774fbd6180dc" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="0f6c34ccf2364d94e6feb3b5cf41a662028a643baa20b0a6163f9ce7baee10a3" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="62db653662890f0b876cbc55d9ef5e5b7ac0da9ba4cab07ab74258e4b9188aca" name="libvirt-daemon-driver-storage-core" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="e9b8a56844e00fd98bf6c926f954818eed814d997fab3150391b1b9eff825ac5" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="b2430c2975004d78e9e57634543a6ed984cbb55890f643595996565a223a33bc" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="df57c5fa38d25ef595ca34b69c2cc0ab8f3c320a657a058b1ee01d99dd6ba125" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="773d07d4eae3547021d68213bfd1dcc06d882fb47adf96339d498e87ccdee979" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="61905c5e7253c0611debebe440a979ef68ec587784424decaf9c02b5292d9a73" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="a77827f399076b57cc63135fa163f94115a04602f3d32a176d5235deb5d153f2" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="8ffe66f71903fb1dabe714ee470fac23e3905949819a29e5d98dd2a95a9c1fe3" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="ca0ea1d72e2d09b425e34e2e065c7d5d93dc059293802d4928b0d32a9d4857ca" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="8f0ac2745953c1dc5404917eeaa2e005ea79d1eb4e75fb21323910aa65e5b3e4" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="16e3d8fbf62551e17c440e6a52e2d01eff4f5e8784f9925eaec6ddfc4b9fe2a3" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="bb76e85e9b6fdc3f618055f2cd7c754e01dd8d936eeb5ae76b063c5bad65163b" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="06a3334235d47d87cbaea9d728661ff88bc4b90752ea5aa378f4ce7b20e545de" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="bd7a5a21bf3b0f17cf6d1ca38eff38b6743e7f6f9cd6a09387838f2da0c9299a" name="libvirt-daemon-driver-storage-disk" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="ebf79ccea71fde76beaedf9e0d7c3fca771d516e3bb3700fee6b9beae97c3bef" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="62069eb15bb1860c931158e1d22e176727a42dbed58067768f7765c3f82ac806" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="6a45d9c88b98b0f153250dbb2e8dcf2d8c39159968076ba7d83cf257622c3111" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="81bc947522e8a58cce307add905439687b882a44f3ad051f500ea352a2a3c0bd" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="5bb2885f90cdde9daecd1720ea0ac247109fe0d593bccb4794ddbea5215e04b5" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="0269f513c9d57019a3f640acec5e7c799f9e1784559a62554b8b930f0a932384" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="087e33fe3fe81ddb91b4e83d5d0e341ca9c04e95c82512ff1317ce06b9334b7c" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="7a9f4793eed8d93fbcf823e97cc37bb3155d1352cf7617b6ca8e2e067d05aba2" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="79b2bb81c56c3ef6d9bd9db158d7ef0f9d70f17af9b176d017ad75530d5391d6" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="209c5df21b1bb62d5c30c70fd7e2929c8f2887c9eff3bf9c88610e67989d9123" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="ba66672590176957aeebab9c5f05d1e354b9f7b975f522d0b3b92fdc890892ca" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="99eb9f27b50d6edb5650537efa824dc6ed79bb2767703ab0aad9400d73365a43" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="adbb2b5349f4f0aeb206b3372387062ff6063a51ef732ee962fba9f27606f22d" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="3a2a5f2888a5c46cbecd91fa0d771252a19e9eabe175e616cc2d50778f4c9533" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="9cc31e6f628ec6717667226de7f8c32caf57bf1e3e75915fb2e4af1278929b85" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="330843a010ae9f984695bd3556b8544cc93a719092ee39244566b5c34ce7b347" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="06e5d9654b029bf7dd3f43ed517d6858f4a6a8495391520a287091b1c83abbfe" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="e77e903a3b91ee11bec9cc15e02de597c8673a02d36687ff17684e8684845dad" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="94724ec2b2bada49dbc02024bde00aabb8299fc209c71bc7e4ef03c16092290a" name="libvirt-daemon-driver-storage-iscsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="5d475cfc0aa4fb23aa4263e8e70ff83d4ac8b8b17759d622f79b11518a224284" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="f8ca7f7718838fb40a92f97f5cde8472d6ab29db2d10e7cffab2fe9397d6af6d" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="852de89b5e48d1824dce0d8bd5e67b5ede2552666046d5de585a3f3c380dc1fe" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="86afc734647c117a189ab83164bde2e18552b2589618942226de1dd880db0e78" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="b0a7cc3659cc47dad2bef3555126a1c060b2c31486ab3118b8bc70e33893e38b" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="ed0d3355dd71a6549c4fca6857d9c8b9bee978c53368c1f76ef280fc4fccabcb" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="6d36be6bb1d5832e2e09bb132af73fd28dc1defdc262a2037320b753d0da7284" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="618f64cbfbd07d71e5487b9dba536004e22c049a99c4c281fe2e25b4b15e302f" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="4ea7a3d21d6708cd091dde49d4afd2bd42be79594cc8a9369209c1106a127e7a" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="d99576959655bd2af28b67b9d4e799a5c6acdfcd67ba084a7df65958e0007f42" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="fefe3a30389e15c6d35e784298498f1f25b8681d12dd60be0b95118c6596a9fe" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="9a5a7c555ca27c34fea9858818315643edf6783467ebc913f55bd9fe8872788c" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="5db649f5cb4e6456d9a37fa6ce421bf305795f55c1eea66a18311af46b981bea" name="libvirt-daemon-driver-storage-logical" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="0bc636251b06d5932d7df090467a15673784baa958825ae1a2d6001d67ede12f" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="7a716b86ed342b275ae74fd7e52a679e1f3ec7558f8f7016fcd599bd2089fb81" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="43f93755f93486e72998fa7daaf42d68e54e402687215af92fc593e6a481cb1b" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="fce82fba653f7477566eaa81608cc695e30abf992be6bc1cd5a739a28714eaa9" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="576f955187ad353f0710ef94709acae15ba84d865c8d3b2302eececc4cb19a81" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="202e2c47a0f389b3578e573361ff64653f06640e8a01b017d6c94d9896fe0de7" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="52ccea3b0e6ea78eb7909c06078b9fa031bc20e2774b8fe15f873bc99b17a665" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="64aa6dc7411351d584c1b7611b968d0d9d6b2eca5016199cbce2496ef70afc5d" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="9d370999f3fbf4cde1063ca7379870af4e2968277b57cc2aa18bae7b197640de" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="0a631fac1d02f407d177d68bda1cd4046f36545794711ee06b64a39ce44f0b6b" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="8e297878944f79f71afe0db72a243a076b460f128fa1c842b9519ec4a68a7e5e" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="53446cf8fda9db8220c4b7e688b1b5fd78272c1c031574925fa534df02519625" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="530ab46675db1f99e4179b09257dd385626ddb05fe0865cf7e406149810bfcd4" name="libvirt-daemon-driver-storage-mpath" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="b602dc600faab1bfa6ed349e332deb79582a8c06da325d15bd92aedf62606f93" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="b44cc1e2e0e7a3dc7f367c6d2197abf9102c3dfe1c6d00b3c686dca3ee208a34" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="93d6c7a6ac33f404f18c729425f3a9aedc6d2f2b012d6b0892c498ad891393cd" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="1c654d5bd4e7f37e15288b792d8c6ca5545d45742a5e3be70e8d32694b281242" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="311fe93093b7ed76b0d341f3fb381f13ef4bd242572c21719f35603c9ef8beb0" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="2ea1b54c5b2d674d6cc7eefcf2049a8bfd567da5bae09dfb9c486d1ea91d2e54" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="503e01ebce93beba63ddec6e50b063484c27aea4b3354ebc8b1fe231fcfe3475" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="7df0b125f018c1683a5b79433b12b616da7b41c25e8dc1b4c955bab0aa1d843b" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="b6b1bb65640431912fa84063f4cdb797850dba88c1de826b0be7d66e48cf2d8f" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="e21918b5fc260b241a59523d03b75845dbdddd841889f42eecb847c734285f16" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="28ef33577757b675ff1200d24a7290e12f65b6de4c3c1a868a5c0f7b65142615" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="63e3e636ede2cfba35ef620dda06ba81fb61e9bdd658e061286fda548b7d6006" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="f0a41a50ef6a2136e20549fdbda9abe0129ddaca3e612eade0a049836c59336b" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="6a4379d0f13ca37180f1604df4890091da16467a15d0bfb14bea46102341ed3b" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="864c963bab27e6a9c4ef0ad51ea15a8504e06e649e08fdaffcb9ae4e50f624a4" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="562a70a2861f6fca6281eeb922b2970ed1b05fc575fe1dc4e5b72841a7842a11" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="59fa52be9a1ccc7705b33a619590311f833972bcbb85efbbb163f3a2c121a0c9" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="08807a0bc801737095e30cc83d0576b6383674c5cfd5d9408f23aa0660b013ce" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="946acef22a82a461b1eb750af3a2956c6e42a5c685ed606d6bab37ec87aec290" name="libvirt-daemon-driver-storage-scsi" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="4ba5edbff26f9873485870093d60467c93d647e910ab7b476d0cf8b695e5222e" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="495606aefd9219f93a35eb9c541254212418b4b485c27cbb72049f44fd764621" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="010c238dc25e9bff1830c8f37babf8e3fca9c4cd794ef184e72e762f653c0afb" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="51e23601fba9a38d10862e74eff486230a991c3255264b0bc650cc84f8d18ae8" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="b9783e1acbba5965676d5c08ecf5cc220a75f483b15e932e782f7619770f333b" name="libvirt-daemon-kvm" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="3ff928fca9e6ca6f2d34d1eff88c7d5d46a6c6fc94b9e177fb30cb312f9a7d10" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="13b56b39c9b12a456163c26d8a1b64457d35a08a4ade959fbaf66503b190ca92" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="fc4b607812f6050faf99dbfedce3c35462db73fce700ae3f668e0ee4cf914426" name="libvirt-daemon-kvm" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="fab65a5671a72dcd872d037d0e90d84247dc9832bb13b8aff8b8ba56fe7c56a7" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="45a32fc57f65c0cddfba29363a7c6bbf76b00d4f89caca8d50cdc14ad85631f2" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="df752473070e3f93ebe0aa478ba2265c0cbdd54b8035efb0556e97c25fbb69f8" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="d5b46c3737c7e6fc8b933e366e9926595caf9c3186821e049cf1a243ae72286d" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="b8d0f705ac78423143db71cf27eb049a3b3785768d503cdec157974efd6383a0" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="14314cb68e3393423c6f270f0b17bfb4c7a01a92d0cb16e0daa520013429e193" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="2c5541ef9f42854fb4786c02a5ab0ee9868d98d9f75d8f8c9d96d3482a904e31" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="842580ed68bb63124558debda5b3a6d407489e24422a78656c51caf6e064ec8a" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="781acb86cbc20d07f2ba0d9efe38a763328afdb057d88173ebc62994eab44ac9" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="29ba134de5e51852a55dedf100e03f0b9030c628a43bfb9c2794d77157bb8e4b" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="6b9938b3a51e4d6d5b56ae3492802fdb26c8576c73796a36d4f8a8784eac8033" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="08d7ca452eba20f4fce5d55921eacf53c6c1e86b5b7034422b9b51b0ab8bd2ad" name="libvirt-daemon-lxc" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="8e14013f852662ad01fd01ca475522369e786bd1ccee352ab30aeb75c8a36369" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="2f6256302105df056168277cf716afe00e2dca5ca2e60311144d013d1d5f273c" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="cbddd84ca547f0199116d157248f6cd1ccc1d5aafaaba13dc97e5edfb55338fd" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="89c6e009627f778711753a059d41a8216b0cda869c3f8929daaf6b6f72817939" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="5d3f6d0c2b9d7d51fab7654e21eae772b862a2ab3dd5da7ec63869b4af4219f1" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="1d8403ba9c84e992c23763df26c17b66e35df0191253d55cc26aefeee2a323d1" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="a5c210a3f43f9b1609d2b2eda5b629a21aac7baec4c9dc8ce3584859cae243d0" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="e120373a8d9859f0f35d954c3dd45af5d536113d6fa1336be79d408453701ab6" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="b984add9379d907f845e1bb65716c872627f0ed766cb32bf6bb299f667a2222e" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="5a685ba5bf6b129acd70998cfc7919e5e9b7a7e82b5b3f6df132c40d8dec52fb" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="736ccce65217104504a84df49336bb0a2b237cc2ad5875eaae6549963e317abd" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="b93dc848782a76ea357066b1312536d203d97d9f367b5259783bffb84d394c7b" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="e0ce2def37c6949501de1397832fb0cdad73a7c37a2136c7b69ce2fc1e41458d" name="libvirt-debuginfo" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="68531cd4e68bfe9b2ae2687d40399f78aee7c5db14cfee7fd29609dd8617cd14" name="libvirt-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="98c4fb6d6808c5379ba23651ee5c0db6b399675d2ed31c0ac160d94f38a4220f" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="a01313288a572aaeadd8b0ccb2f6d370424def7f76f7ce7ba400ddea718f59b4" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="173dca7e185f4e90c6b064e251d49aa870c74a756ff2b91369e03058d2efba83" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="a6a4293df52a71dc8836b8bcba3a0c2855bd4216b2a38b1cd2b029bc76615fb8" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="ce9c1e273d7ac5b5b5decf61c8fb2410fb3723cc42c482c55e13c3213fc3a350" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="4c958f65da7d353f45353cfe223df1608436df1ac3d56852ae011f76f35c0aa2" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="dcba82a249ece98eebe7e853b8ecbcc1ea35c727aae584bf9b7c289dafb647ef" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="9a7d8d8da2f0551d28fd7f3729671114e91da0d7fa97aedee1847b86d56fe865" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="a0554679fd2af19eda22a51f30fa97e98f175db524a0cfa4cf7647501207e93b" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="4ba56515577b9290f7ad98950b4b90f51b7e3210ef39c16556b1402a8d1fcc68" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="635b3700d13f296fbb6e6bf981bf9342233502122a6b16a2c4a093207fe27a8b" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="df5457dd3d3b13ac24e896e65cb64ccb22812166f79f4215de4f4e431926d579" name="libvirt-devel" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="89b54b3369578edee8e57287dc1e73cb5a106ffbbc1dd46e5f07b84bebfff1f9" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="da0f33f1f2d92d21d946312edffd44a09d9aa0099fc3c8e874242f807eb74fa5" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="35f9425864cfd220909402abbd3d9995f0c1aebacf547a0c777428431c1993ab" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="2aab5da414d29ac849d97666ace619badcfaf1616ea2890100ceff049d36e29b" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="87bf46c4f7e44580321ef30573a2a8a7eeda675bd1d5a858747789d6111332a3" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="e2e41c1cffab30d66179b1867cd4847a99e7bbdc526448c72ef019d424fdfc4b" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="a5ee3a5eccff4794a69b5df2b2526a77b42ba51ca76b6f1feab5f3011ce0189c" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="cc131d021435fd97af0ed44e2261dd0c17830867144a15295ee58ba8b217279b" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="a5f5ed85f95fbacd08b7f07ede4d4abe16dfab2807bbfc46991eb424fc277d41" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="614f6a951ba42abe480f7eb50dc7ca2da8f36c47bbafc38064fb796af77b3436" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="38fb8f6d79e5309bc226599e64212001bcce9eb1f5249b21cf5469dfdc085635" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="c057a71aab701fab9d2c5c5c9dad86b8bbd33ba189f64caa9174d785875eaca5" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="27b41cb3f421c4104c1d24c950aaa707aedf5f366ce2565b685fa19a6c557b80" name="libvirt-docs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="a04a92d009622b7fc41b79efed2c4b8f0a4a0163ca0d867e6b762d97ce616858" name="libvirt-docs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="fd6dd0f22d0b7ba55eb5bbd097686d0741d822f7e6d147a7db9f21605382570e" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="9f9d66712195ce105ef963a7a955a73a8d4354945c9740ebe9dcbf4ee4c3f04a" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="16d81a0d33e99a03aaa270ac8c78eeecd5ee6699d058367791381af1f006a631" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="3509c0c6310a50c4afc06877aade555c58bf492011aa702a44cc5b727f64af64" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="f5a3f0a6f49da2aa36fe79aea6befe3a12ee9c2083ae4d74d2abd9b5251436bc" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="270bb1534869178e3a1fd316e138b446dc4c09ece344db10148d2c4f9b26049d" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="5fcb9c1715c767a5c40b87168f9b39c4384c8469521bcedfa08a8f78be3b7b5f" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="33fe31060de1f143b0c4385c197b2e2319df74e6351c087b51fbb8f6772b45e7" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="25c5776afb4339b44ec9624bd6888c095bb3ad814c4db293d03145d5f9b320e4" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="da5aa06ea4ffbf5ad99fcf2a680e30622a388506e0d8e655973ef896969f5b9a" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="6a8d5c4b5e2b29e9011f885a0ca706385aee38b6f3dd53726a4da21d5fda7f5a" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="e3c9f72b232343e76d644aec16316f88f2fc640c15561588379bc95d8dce5dff" name="libvirt-libs" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="6ec98d554d007db42ba972e8356a3a1a0224b2ca97330e073ce0bf2fedcd7295" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="095ed2a84cf3753ac941717ebcc226d0dc791ecaefcc8ef9d18a601aadaec355" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="400c2259aeaeda1c89fa3d9fe68f73819f8d9e37f6e1b1eb20ec5646b54c64d4" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="60829356c7a5f79ef0662c0aea338a0298a2b4b4ec41076f5366c7291eff9425" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="320a2a418df0ad8681d8a9fc5764d701efd4a504c9a17424233eed509ae9bddf" name="libvirt-lock-sanlock" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="42b91129899bda6913d64fc0ec9cbc65e7b90d2758e3b2697525b4a1f43b6432" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="bd9c12e5a87da9b3dae58b064314ae68c5b9473bd1fcb05668b47347c4f3a8a1" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="3317b9f9110505648e53272594c4a1a59326e0de7471967bbf929a6ec842c040" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="78fd0d682060cd8e3ef0d2493cda1905037198b8af1bd6ffdc3379891e23b39b" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="9d67f50f74eb06a9a2eb79d94f6dda78d654c5118443993a51a96df7c603e96f" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="f5403acc1e3ba20c887e54ed10380c9340d41abe0f65727f591b599e6bbe0aef" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="96404a5f4f3180b79de6ef37e300d0902b004c9ea7a1b43733089dd6b5284cca" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="5debde827224c0e68b71c6ef90e51440534dc5a82e54001116fee6c90511cad4" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="4352f5e718c655cdc68b5939853dc8f60aa4bea34e686b4a239420260f7bf683" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="dc3cc475d3beeae1f2daf29899024f4a80728e7c1b4248c4c349e9c5c64a7d7a" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="d70021db04a2ff502aa1506fe1f0b147cedb68f84e2bb1a3df4a5f328c8cfb31" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="b264412ec752c00c58a8844f5eee7a35b7111876482726eb8f3106edc6dcf3de" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="c23dd81b7cb270dca75b99f9b63203a3afdc7eabd953bde814f0bb3fc89c9a52" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="99b7d2fadb823432d4cdebbab427ebbf531643dde58fd4b68c067b71dd318d2c" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="d896924daa1f299f6302150bc11853c094c20298bd58be410570b3acfaf75f4c" name="libvirt-login-shell" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="1541ab4bbb652d5db9aa1f65d837bf57a9c9eb3a4ff35ebe795c64733b3374f1" name="libvirt-login-shell" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="5cdeeaf5d9f265c3f20541ec2f6672c079c9184dd6d44f5c5d42e3baf8820d93" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="cb158ca705db6ef46abbc24781dc7cacac002b3dba5d08895021436a7071a9d9" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="2270291530b6a866eadf99e9ed54794dc09876af97173fbfd0218778be566183" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="a932efc5d86c5615c2f2dba571d279cb261dddcf58a733e80c072a677d286190" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.2"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-7" date="1515067200">- conf: Add infrastructure for disk source private data XML (rhbz#1523261)
- util: storage: Add helpers to parse and format relPath into privateData (rhbz#1523261)
- qemu: domain: Parse and format relPath into disk source private data (rhbz#1523261)
- qemu: remove input device after receiving the event (rhbz#1524837)
- conf: honor maxnames in nodeListDevices API (rhbz#1528572)
- storage: Fixing missing 'backingStore' tag from volume XML dumps. (rhbz#1529663)
- util: add virFileReadHeaderQuiet wrapper around virFileReadHeaderFD (CVE-2017-5715)
- util: introduce virHostCPUGetMicrocodeVersion (CVE-2017-5715)
- cpu_x86: Rename virCPUx86MapInitialize (CVE-2017-5715)
- conf: include x86 microcode version in virsh capabiltiies (CVE-2017-5715)
- qemu: capabilities: force update if the microcode version does not match (CVE-2017-5715)
- cpu: add CPU features and model for indirect branch prediction protection (CVE-2017-5715)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-8" date="1516104000">- qemuDomainAttachDeviceMknodHelper: Remove symlink before creating it (rhbz#1528502)
- RHEL: cpu: Fix EPYC-IBRS CPU model (CVE-2017-5715)
- cpu_x86: Copy CPU signature from ancestor (rhbz#1533125)
- qemu: Ignore fallback CPU attribute on reconnect (rhbz#1532980)
- qemu: Fix type of a completed job (rhbz#1523036)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
</package>
<package pkgid="ccca35e3f8c148e61bb34c02ab05847ed6016ffcb764b910cfa202009b65ff49" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="154b1e614e69e49e5782550a92050e70d3afbcc99ee285c20bcd04a19bc56423" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="4445b8ec4fecbfd2509acf9b89915c8fb7bb57b06f1a880d3e93d19a8af96d1f" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="696c5d3aab96fc942f60ddc1b2cd314ac1d0ad3f76530134741fcf623e0549ef" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="c0f50068aa43823f2c04ec2202744583b3c06e301cb194260c6663e41ddaef9a" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="de7b1739411f998aff7db907b10f39b500d7812885c479ab037cbb097846398a" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="68df7d917fa262fe632f91ec9da5bba33e3ddcb1220380caa069222544694b12" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="03db64517df6cc4952d2dbe1927425990a55f46e93035a93922ab98074405cc2" name="libvirt-nss" arch="i686">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="193cca837b180d89cc834b00a51f28fe65d305d26bb6ea2c5734487ccf14dc5f" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="7c4e8716b95939a9dcac0717aa08dc436491b547f47226ae45fd962981bf54a6" name="libvncserver" arch="i686">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="da6a726bb0bbb5e88a5f7f4464de80c465ec18c265647f86dc2efb8901970de4" name="libvncserver" arch="i686">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="f1e0b7bd67c8e742db555a4cfedacb066d92a5e5643a80d6ddafa2cd5575f78d" name="libvncserver" arch="src">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="60ae62694a4b8037caa05d2a332ee44ecefd3954e14907fcc9e41b84a7028e72" name="libvncserver" arch="src">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="2c81ba5dc94b16202c5c27ede3356f4c046c61646c0c431441a2ca3f9b852e4a" name="libvncserver" arch="src">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="b212b77ad03acde29173d169cc94f6c4ae83d57d199b60ab6aff757f5ab53cbb" name="libvncserver" arch="src">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="3ae6c844d3355e7f772eabb9d890b0835619e2697b468e2cfb23e46bcffc338c" name="libvncserver" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="ed33de14fcc9c06fca682d38027e51f1b895120a1634e5b6da3817928172c61a" name="libvncserver" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="99ad3ce9f7f47f7fbe1749b07184b5a41d3ec3964cd28a2ff4cf3c2da815e3ab" name="libvncserver-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="17a845a08abcf0fe70eb1b9fdfcbb727e311cd0f0ecb25e3d83cd9bf3eb41031" name="libvncserver-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="c7c63faa96b59853d3e3516391a8b984fc1faa95c7e0989cd7fbd2c70a1b2e53" name="libvncserver-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="f6617352ec2ec4a60e7f4e882ec6ad6e98591c919a50771b9b097799cdd6b6af" name="libvncserver-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="f31e5840eac9d1a1db474c4956664bc2454f136a2a31614ddf19caadfd98438a" name="libvncserver-devel" arch="i686">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="633e2ff842f2aa2bcc63ca5538894e24be829ba47d9f9d02a0e80252f17e0c45" name="libvncserver-devel" arch="i686">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="293c4407b590674f528431d5d9b7c93affdcb6ecfeba697cfc7cd6bc632069c8" name="libvncserver-devel" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="53576512b1d909b1d9a6f4b9787c44f7c97433ad4c0e3505fa25cfea53efd54a" name="libvncserver-devel" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="12.el7_5"/>
  <changelog author="Adam Tkac &lt;atkac redhat com&gt; - 0.9.9-5" date="1358510400">- rebuild due to "jpeg8-ABI" feature drop</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.9.9-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; 0.9.9-7" date="1360843201">- pkgconfig love (#854111)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-7.1" date="1365422400">- Rebuild for gnutls</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-7.2" date="1374580800">- Specify dependencies on libpng and libgcrypt (bug #852660)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.9.9-9" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-10" date="1414756800">- Fix CVE-2014-6051 (integer overflow in screen size handling) (bug #1157671)
- Fix CVE-2014-6052 (NULL pointer dereference in framebuffer setup)
  (bug #1157671)
- Fix CVE-2014-6053 (NULL pointer dereference in ClientCutText message
  handling) (bug #1157671)
- Fix CVE-2014-6054 (server divide-by-zero in scaling factor handling)
  (bug #1157671)
- Fix CVE-2014-6055 (server stacked-based buffer overflow in file transfer
  handling) (bug #1157671)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-11" date="1505476800">- Fix a crash in the VNC server library on connecting an IPv4 client if the
  server could not start listening on an IPv6 socket (bug #1314814)</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.9.9-12" date="1519646400">- Fix CVE-2018-7225 (improper client cut text length sanitization) (bug #1548440)</changelog>
</package>
<package pkgid="b5ec9309cb4337a9a7afacc24a129fdb809a1f058eecb3683966b261019e3e66" name="libvorbis" arch="i686">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="74122c8820be22b41713bc045e1ef9a4ceee2eaf8fb9bd588d25b15ab4019735" name="libvorbis" arch="i686">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="b6e60b0576e99949450e724533be77be44478a83c1932340fae8b68cbff0920b" name="libvorbis" arch="src">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="2d96dec52ad30fc1d685e7b7826c48cd8538fc6d5077640794729412adf576f2" name="libvorbis" arch="src">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="ef837d134abf10f1c3b771af3b5352f512322fa44f518c880870b24c90e9cd2a" name="libvorbis" arch="src">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="416ebdfa646a0701d839aaf6ff4737f0d03d58b1a68d0089358f873bdf62307c" name="libvorbis" arch="src">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="85825f1d0ef2530bf580a2ae3c2f93a6c2a47268a286cf5a7d865570022b592a" name="libvorbis" arch="x86_64">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="1c2480c076a650b7d1fdf880d14af3086b853bf622a81292c32ced234f40cbc2" name="libvorbis" arch="x86_64">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="d223abcb32c0f907b9dc4b339da696ea15da0335eb7d7fbca615ffab6eeaeec1" name="libvorbis-debuginfo" arch="i686">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="be6f60fdc4ddae7924e083a7e9d9d867343f0fbaa1d4e57a394c53f405a8505f" name="libvorbis-debuginfo" arch="i686">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="4f8e91e65fb68593a6feaed48f2624eaa1fe8bddddb240f769e3364d35a9dd20" name="libvorbis-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="28be2f841ccc2e5b822f024ba60dc04044146eb463d20dab3a4857ba6d461134" name="libvorbis-debuginfo" arch="x86_64">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="9d8b7e9355dc50a344d25a3dec9b35d1609a8bd74f071554826dfa4336771dc8" name="libvorbis-devel" arch="i686">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="acbc9c8021c035572799b72f8abcf1c5b4dda49cc70102dc3e14df00fa9011ed" name="libvorbis-devel" arch="i686">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="0d9130a2911b084a6ddd8eba6ccb966bf0ab323b2c480c89048ae74f4d019d6a" name="libvorbis-devel" arch="x86_64">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="c93e8dd7e4ae8953a00cb1e8532c19364556c69d6adee0299d27abd6f2606735" name="libvorbis-devel" arch="x86_64">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="b234b01442bec34e05b7e25ebfd81a25c50065b19da12203540920a8a08e6077" name="libvorbis-devel-docs" arch="noarch">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="21e3efbc6123ebb76a7df09ae58a03b433deb34c561918a932e2e80487ee4ce7" name="libvorbis-devel-docs" arch="noarch">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="a457e894dece9b3607fba301ea60e7ef64603b3f682dafdfbb77ec2229695415" name="libvorbis-devel-docs" arch="noarch">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="f3f3eb5dc2b5fd3fb44c42e5bf34a6efc4e8fbfbfdfb8178306a3014c85fe931" name="libvorbis-devel-docs" arch="noarch">
  <version epoch="1" ver="1.3.3" rel="8.el7.1"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; 1.3.2-2" date="1325678400">- ship documentation only in -doc subpackage and only license
  in -devel (#540634) - thanks to Edward Sheldrake
- -devel-doc subpackage requires -devel</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-1" date="1329134400">- libvorbis 1.3.3 (#787635)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-2" date="1342699200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-3" date="1342872000">- Run test suite during build.
- Fix doc file permissions and duplicate doc dir ownership.
- rpmlint warning fixes.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-4" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:1.3.3-5" date="1375531200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 1:1.3.3-6" date="1375963200">- Install docs to %{_pkgdocdir} where available (#993967).</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.3.3-7" date="1389787200">- Nuke -mcpu=750 from cflags for PPC, that plus -mcpu=power7 confuses gcc.</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.3.3-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.3-8.1" date="1521547200">- Backport fix for CVE-2018-5146</changelog>
</package>
<package pkgid="485f0478affb0eeeb3e61f66423dd3b6c3f54b706c401e16484058077fc8655c" name="libwacom" arch="i686">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="d19ddcf9b053ab11428bb49f07f787a446bf427a4939e9bde13be9f073890ece" name="libwacom" arch="src">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="8e97683f495db308630c15ef42f5329eb85a4a9530feebd1a04072b69ab241a8" name="libwacom" arch="src">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="cc0067c3d0fc1d6e3ac3e26743f5f932c8c312fbecb705efc2088b22f312199d" name="libwacom" arch="x86_64">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="6b41af38f8ebd4afea76311de959394f2e508d6ff367c6706816756bb18aab58" name="libwacom-data" arch="noarch">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="0c9440eacbd6c8819480c0bffe7810997cb45f4ab94f170932f66b137b5eb680" name="libwacom-data" arch="noarch">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="c982a70857665f7cf9514b0ae95e5c96a07ddad39bc702c3657f1fcf8757aa64" name="libwacom-debuginfo" arch="i686">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="2fbbda33adac4f6c3b8acc4ef2a1d7a77ff8e134d019ed2dc3756d973a862009" name="libwacom-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="ad02e1ed34988475ac89450cf234ffeb22513d53b9b6ce3aff42080d8830a4b0" name="libwacom-devel" arch="i686">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="9b48d43f59d1a5176dd725da0767e8a516b00873198ab486409fb6230d24cb80" name="libwacom-devel" arch="x86_64">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="32028733c825161d31ac0e16dfc375831842acdfb701dc303b8560217b8a01a9" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20180220" rel="62.1.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="87b701ace4bd4497cdc0daa9227b3b42cc33916f0bd5ea4feaf7de9026b823b5" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20180220" rel="62.1.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="ec8fd6008ede3fdbd8ca90250ad274edc74ab712ba390b3fcbabcd0b974b2a92" name="linux-firmware" arch="src">
  <version epoch="0" ver="20180220" rel="62.1.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="609848f0c5a97ae81967a0cb73c3cc7ca1b9f1ea9cfb9e75a5fdbb16a31c884c" name="linux-firmware" arch="src">
  <version epoch="0" ver="20180220" rel="62.1.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="f29ad5df0a1fd063a2d533cd81f9d518c1f528b601c2be16f425c81fdf81b494" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20180220" rel="62.2.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="6a4b8f0705451242c1ecfed54a1f069fe1ae3923e2e559834b24b9e4dfcf5529" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20180220" rel="62.2.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="7c0943250777073d12e63e2072df984a4af6501541cee42e07a2f40c1ceea07c" name="linux-firmware" arch="src">
  <version epoch="0" ver="20180220" rel="62.2.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="d385fb3f7fc6ae3b6c70e480230a0c190f59c670fcfcad2a1a581af295e92e7b" name="linux-firmware" arch="src">
  <version epoch="0" ver="20180220" rel="62.2.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="0158c064d0de4d6e2b29cb303cd662f109d2c2de51ba758086a0c626859b7ff4" name="logwatch" arch="noarch">
  <version epoch="0" ver="7.4.0" rel="35.20130522svn140.el7_5"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-27.20130522svn140" date="1372680000">- Remove unused patch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 7.4.0-28.20130522svn140" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-29.20130522svn140" date="1461326400">- Fix disrupted sentence in default logwatch.conf file (#1126848)
- Fix smartd copyright message needs to be suppressed again (#1162741)
- Fix Logwatch cron files not marked correctly as %config(noreplace) (#1221903)
- Fix When filesystem name is long, the disk full check fails to work (#1293360)
- Fix Should not change the case of $logdir (#1293624)
- Fix logwatch --service sshd --detail 8 does not print Kerberos summary (#1295888)
- Fix logwatch puppet-agent unknown entries (#1299181)
- Fix logwatch fails with argument list too long (#1300170)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-30.20130522svn140" date="1463054400">- Fix smartd copyright message needs to be suppressed again (#1162741)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-31.20130522svn140" date="1463054401">- remove incorrect changelog entry (Related: #1221903)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463140800">- Refix When filesystem name is long, the disk full check fails to work (#1293360)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463659200">- Refix logwatch fails with argument list too long (#1300170)
- Fix Typos in sshd service script output (#1335493)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-33.20130522svn140" date="1506945600">- SSHD log format is going to change (#1422797)
- logwatch encode=base64 generates invalid mime block (#1123093)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-34.20130522svn140" date="1511784000">- add support for systemd journal (#1504984)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-35.20130522svn140" date="1529409600">- unmatched entries after ssh changed log format (#1504979)</changelog>
</package>
<package pkgid="6b9a86b5a8da975c0ccdd8b852fc15f7e3d99e0a859c4576b5aa500d3b03bb95" name="logwatch" arch="noarch">
  <version epoch="0" ver="7.4.0" rel="35.20130522svn140.el7_5"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-27.20130522svn140" date="1372680000">- Remove unused patch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 7.4.0-28.20130522svn140" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-29.20130522svn140" date="1461326400">- Fix disrupted sentence in default logwatch.conf file (#1126848)
- Fix smartd copyright message needs to be suppressed again (#1162741)
- Fix Logwatch cron files not marked correctly as %config(noreplace) (#1221903)
- Fix When filesystem name is long, the disk full check fails to work (#1293360)
- Fix Should not change the case of $logdir (#1293624)
- Fix logwatch --service sshd --detail 8 does not print Kerberos summary (#1295888)
- Fix logwatch puppet-agent unknown entries (#1299181)
- Fix logwatch fails with argument list too long (#1300170)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-30.20130522svn140" date="1463054400">- Fix smartd copyright message needs to be suppressed again (#1162741)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-31.20130522svn140" date="1463054401">- remove incorrect changelog entry (Related: #1221903)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463140800">- Refix When filesystem name is long, the disk full check fails to work (#1293360)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463659200">- Refix logwatch fails with argument list too long (#1300170)
- Fix Typos in sshd service script output (#1335493)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-33.20130522svn140" date="1506945600">- SSHD log format is going to change (#1422797)
- logwatch encode=base64 generates invalid mime block (#1123093)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-34.20130522svn140" date="1511784000">- add support for systemd journal (#1504984)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-35.20130522svn140" date="1529409600">- unmatched entries after ssh changed log format (#1504979)</changelog>
</package>
<package pkgid="59579ddd9ea4b8ecb2aeb5ba4a078d3b428f602fd786cf78332c1fc3aee5141b" name="logwatch" arch="src">
  <version epoch="0" ver="7.4.0" rel="35.20130522svn140.el7_5"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-27.20130522svn140" date="1372680000">- Remove unused patch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 7.4.0-28.20130522svn140" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-29.20130522svn140" date="1461326400">- Fix disrupted sentence in default logwatch.conf file (#1126848)
- Fix smartd copyright message needs to be suppressed again (#1162741)
- Fix Logwatch cron files not marked correctly as %config(noreplace) (#1221903)
- Fix When filesystem name is long, the disk full check fails to work (#1293360)
- Fix Should not change the case of $logdir (#1293624)
- Fix logwatch --service sshd --detail 8 does not print Kerberos summary (#1295888)
- Fix logwatch puppet-agent unknown entries (#1299181)
- Fix logwatch fails with argument list too long (#1300170)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-30.20130522svn140" date="1463054400">- Fix smartd copyright message needs to be suppressed again (#1162741)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-31.20130522svn140" date="1463054401">- remove incorrect changelog entry (Related: #1221903)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463140800">- Refix When filesystem name is long, the disk full check fails to work (#1293360)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463659200">- Refix logwatch fails with argument list too long (#1300170)
- Fix Typos in sshd service script output (#1335493)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-33.20130522svn140" date="1506945600">- SSHD log format is going to change (#1422797)
- logwatch encode=base64 generates invalid mime block (#1123093)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-34.20130522svn140" date="1511784000">- add support for systemd journal (#1504984)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-35.20130522svn140" date="1529409600">- unmatched entries after ssh changed log format (#1504979)</changelog>
</package>
<package pkgid="7f91b5ebff0610ce65afd85cd6ef0eca1bc77daac217b6b9faed7a362788d48d" name="logwatch" arch="src">
  <version epoch="0" ver="7.4.0" rel="35.20130522svn140.el7_5"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-27.20130522svn140" date="1372680000">- Remove unused patch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 7.4.0-28.20130522svn140" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-29.20130522svn140" date="1461326400">- Fix disrupted sentence in default logwatch.conf file (#1126848)
- Fix smartd copyright message needs to be suppressed again (#1162741)
- Fix Logwatch cron files not marked correctly as %config(noreplace) (#1221903)
- Fix When filesystem name is long, the disk full check fails to work (#1293360)
- Fix Should not change the case of $logdir (#1293624)
- Fix logwatch --service sshd --detail 8 does not print Kerberos summary (#1295888)
- Fix logwatch puppet-agent unknown entries (#1299181)
- Fix logwatch fails with argument list too long (#1300170)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-30.20130522svn140" date="1463054400">- Fix smartd copyright message needs to be suppressed again (#1162741)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-31.20130522svn140" date="1463054401">- remove incorrect changelog entry (Related: #1221903)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463140800">- Refix When filesystem name is long, the disk full check fails to work (#1293360)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463659200">- Refix logwatch fails with argument list too long (#1300170)
- Fix Typos in sshd service script output (#1335493)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-33.20130522svn140" date="1506945600">- SSHD log format is going to change (#1422797)
- logwatch encode=base64 generates invalid mime block (#1123093)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-34.20130522svn140" date="1511784000">- add support for systemd journal (#1504984)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-35.20130522svn140" date="1529409600">- unmatched entries after ssh changed log format (#1504979)</changelog>
</package>
<package pkgid="0218c327193e6921a41ede286cf484db4dad727b26842728f8cee775ae30f8fb" name="lua-guestfs" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="a25fd681f32aec5ca418de5738a44eff100936bf159aab8633e70c17ebac0676" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="29.10.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.3" date="1528891200">- Fix: Operation not permitted when installing microcode_ctl
- CVE-2018-3639 hw: cpu: speculative store bypass
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.4" date="1531742400">- Intel CPU microcode update to 20180703.
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.7" date="1531828800">- Add infrastructure for handling kernel-version-dependant microcode.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.8" date="1532433600">- Add model name blacklist infrastructure.
- Store Intel ucode files in /usr/share/microcode_ctl; do not populate them
  in a virtualised environment.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.9" date="1532606400">- Remove model name blacklists from caveats configuration files.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.10" date="1532692800">- Provide %attr for the ghosted /lib/firmware.</changelog>
</package>
<package pkgid="9f3945a068128317d3fa86041e371978257e46051012f363568c1d23afcebe68" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="29.10.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.3" date="1528891200">- Fix: Operation not permitted when installing microcode_ctl
- CVE-2018-3639 hw: cpu: speculative store bypass
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.4" date="1531742400">- Intel CPU microcode update to 20180703.
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.7" date="1531828800">- Add infrastructure for handling kernel-version-dependant microcode.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.8" date="1532433600">- Add model name blacklist infrastructure.
- Store Intel ucode files in /usr/share/microcode_ctl; do not populate them
  in a virtualised environment.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.9" date="1532606400">- Remove model name blacklists from caveats configuration files.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.10" date="1532692800">- Provide %attr for the ghosted /lib/firmware.</changelog>
</package>
<package pkgid="c7ccd1d5d1a98a91128606115d7bb01173ac79950a7f1a00d26528ee01ea5dc6" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="29.10.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.3" date="1528891200">- Fix: Operation not permitted when installing microcode_ctl
- CVE-2018-3639 hw: cpu: speculative store bypass
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.4" date="1531742400">- Intel CPU microcode update to 20180703.
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.7" date="1531828800">- Add infrastructure for handling kernel-version-dependant microcode.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.8" date="1532433600">- Add model name blacklist infrastructure.
- Store Intel ucode files in /usr/share/microcode_ctl; do not populate them
  in a virtualised environment.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.9" date="1532606400">- Remove model name blacklists from caveats configuration files.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.10" date="1532692800">- Provide %attr for the ghosted /lib/firmware.</changelog>
</package>
<package pkgid="2769426c6dba87b9ddc281315449eba7dd74b25837137a928c1797d0a1260209" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="29.10.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.3" date="1528891200">- Fix: Operation not permitted when installing microcode_ctl
- CVE-2018-3639 hw: cpu: speculative store bypass
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.4" date="1531742400">- Intel CPU microcode update to 20180703.
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.7" date="1531828800">- Add infrastructure for handling kernel-version-dependant microcode.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.8" date="1532433600">- Add model name blacklist infrastructure.
- Store Intel ucode files in /usr/share/microcode_ctl; do not populate them
  in a virtualised environment.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.9" date="1532606400">- Remove model name blacklists from caveats configuration files.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.10" date="1532692800">- Provide %attr for the ghosted /lib/firmware.</changelog>
</package>
<package pkgid="4b0fe6988eab4eb5fe49659aab631eaf5f38b1df7634f03b7c08cb4fea297d1b" name="microcode_ctl" arch="i686">
  <version epoch="2" ver="2.1" rel="29.2.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-23" date="1500033600">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-24" date="1508241600">- Fix upstream URL
- Resolves: #1502360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-25" date="1511352000">- Update to upstream 2.1-14. Intel CPU microcode update to 20171117.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-26" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-27" date="1515499200">- Update to upstream 2.1-15. Intel CPU microcode update to 20180108.
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-28" date="1515499201">- Remove old binary tool
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
</package>
<package pkgid="c9672629f46864d098897985e8206543dacae99a675ae313686f8f09daa0d67a" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="29.2.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-23" date="1500033600">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-24" date="1508241600">- Fix upstream URL
- Resolves: #1502360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-25" date="1511352000">- Update to upstream 2.1-14. Intel CPU microcode update to 20171117.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-26" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-27" date="1515499200">- Update to upstream 2.1-15. Intel CPU microcode update to 20180108.
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-28" date="1515499201">- Remove old binary tool
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
</package>
<package pkgid="dd811f4cb567d1014cc058279164de630633f5dcd237ad0d720398f90cc0213f" name="microcode_ctl" arch="src">
  <version epoch="2" ver="2.1" rel="29.2.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-23" date="1500033600">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-24" date="1508241600">- Fix upstream URL
- Resolves: #1502360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-25" date="1511352000">- Update to upstream 2.1-14. Intel CPU microcode update to 20171117.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-26" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-27" date="1515499200">- Update to upstream 2.1-15. Intel CPU microcode update to 20180108.
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-28" date="1515499201">- Remove old binary tool
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
</package>
<package pkgid="b2e44e92c8f77c640fc7acc0e23a5d97bc654ff0cda053232c91d26fdbf8027e" name="microcode_ctl" arch="x86_64">
  <version epoch="2" ver="2.1" rel="29.2.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-23" date="1500033600">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-24" date="1508241600">- Fix upstream URL
- Resolves: #1502360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-25" date="1511352000">- Update to upstream 2.1-14. Intel CPU microcode update to 20171117.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-26" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-27" date="1515499200">- Update to upstream 2.1-15. Intel CPU microcode update to 20180108.
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-28" date="1515499201">- Remove old binary tool
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
</package>
<package pkgid="3ce63916aec4a0ce4f4542b5473712a93c4d79f5ca8bb075c5a11951427fe902" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="29.10.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.3" date="1528891200">- Fix: Operation not permitted when installing microcode_ctl
- CVE-2018-3639 hw: cpu: speculative store bypass
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.4" date="1531742400">- Intel CPU microcode update to 20180703.
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.7" date="1531828800">- Add infrastructure for handling kernel-version-dependant microcode.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.8" date="1532433600">- Add model name blacklist infrastructure.
- Store Intel ucode files in /usr/share/microcode_ctl; do not populate them
  in a virtualised environment.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.9" date="1532606400">- Remove model name blacklists from caveats configuration files.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.10" date="1532692800">- Provide %attr for the ghosted /lib/firmware.</changelog>
</package>
<package pkgid="a1cd7db6497795d0eaec8fb486cce2b7c373ce626d7122048f1985f8ca377513" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="29.10.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.3" date="1528891200">- Fix: Operation not permitted when installing microcode_ctl
- CVE-2018-3639 hw: cpu: speculative store bypass
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.4" date="1531742400">- Intel CPU microcode update to 20180703.
- Resolves: #1573456</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.7" date="1531828800">- Add infrastructure for handling kernel-version-dependant microcode.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2.1-29.8" date="1532433600">- Add model name blacklist infrastructure.
- Store Intel ucode files in /usr/share/microcode_ctl; do not populate them
  in a virtualised environment.
- Resolves: #1576334</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.9" date="1532606400">- Remove model name blacklists from caveats configuration files.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 2:2.1-29.10" date="1532692800">- Provide %attr for the ghosted /lib/firmware.</changelog>
</package>
<package pkgid="26e2fe257715259ad8cf5b5bac3f3a8d7f7959fda3a85ddc70a0605ae262b3b7" name="microcode_ctl-debuginfo" arch="i686">
  <version epoch="2" ver="2.1" rel="29.2.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-23" date="1500033600">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-24" date="1508241600">- Fix upstream URL
- Resolves: #1502360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-25" date="1511352000">- Update to upstream 2.1-14. Intel CPU microcode update to 20171117.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-26" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-27" date="1515499200">- Update to upstream 2.1-15. Intel CPU microcode update to 20180108.
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-28" date="1515499201">- Remove old binary tool
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
</package>
<package pkgid="95d32ec8879a8b69bb128016b862787ef397d95021228de000808ee6e3c13670" name="microcode_ctl-debuginfo" arch="x86_64">
  <version epoch="2" ver="2.1" rel="29.2.el7_5"/>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-23" date="1500033600">- Update to upstream 2.1-13. Intel CPU microcode update to 20170707.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-24" date="1508241600">- Fix upstream URL
- Resolves: #1502360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-25" date="1511352000">- Update to upstream 2.1-14. Intel CPU microcode update to 20171117.
- Resolves: #1457522</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-26" date="1513339200">- Update Intel CPU microde for 06-3f-02, 06-4f-01, and 06-55-04
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-27" date="1515499200">- Update to upstream 2.1-15. Intel CPU microcode update to 20180108.
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-28" date="1515499201">- Remove old binary tool
- Resolves: #1527360</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758400">- Don't run dracut if not on a live system
- Resolves: #1530400</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29" date="1515758401">- Revert Microcode from Intel for Side Channel attack
- Resolves: #1533939</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.1" date="1525694400">- Intel CPU microcode update to 20180425.
- Resolves: #1575570</changelog>
  <changelog author="Petr Oros &lt;poros@redhat.com&gt; - 2.1-29.2" date="1526385600">- Update disclaimer text
- Resolves: #1575570</changelog>
</package>
<package pkgid="680fa98935a3efc54e8b94710df6d3d2d2f71bfb4f85328f3503b225f4e7d72b" name="mod_auth_mellon" arch="i686">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="a497e6ebb51bc5b73c82b3f3f6747e1613ef49097a2b368ff195fc1cdbe52034" name="mod_auth_mellon" arch="src">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="e79f5dc3f79ddcbdfcd47c44d92a2009c09118cc2d3844703bec271c38da0e71" name="mod_auth_mellon" arch="src">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="5f7e76993178a501f3545b0d79b1cbdb08e611fca7bd9ccbd12c85c1c36e129a" name="mod_auth_mellon" arch="x86_64">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="c5e4f2afd038057f01c2c0d7d26a3b3c097b54b8a1cc877ac87f33d667e9504e" name="mod_auth_mellon-debuginfo" arch="i686">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="a82c52dff873448f563f75d5f3ebc864f8ded2246aee5a2a66f317ddba3bcf0d" name="mod_auth_mellon-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="03d4d295a3cbc185ccd554b3fdb396880cebdea89841ff27929379b68be14ccd" name="mod_auth_mellon-diagnostics" arch="i686">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="ebcedbe756cbe3f8c8ba5cd8174f1bb6431b640cf953b30fec156b69352cf3c6" name="mod_auth_mellon-diagnostics" arch="x86_64">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="c03fc05e49e3ceb8f7645842afdd0c891874d3827af1aaaf6290a74ed31f5e9d" name="mod_ldap" arch="i686">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="a7a008a8f32cc0b7a4ba33a5bf7f758886290e7814f65e5b2d1579250ac0eeb5" name="mod_ldap" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="e2045ccf81b1803866454fc69662fed7b750697631c0813b3cbcbb426733ada1" name="mod_proxy_html" arch="i686">
  <version epoch="1" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="5da0c1165d50dfe2363e41a53b1dae947cc00c0bfd10241de93d2473e29c9b3f" name="mod_proxy_html" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="d54fc50155ecf0fa705daa114361a355801177d0e3d515aeb1499e76ac567f56" name="mod_session" arch="i686">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="ccc93b2e0a9fb8f662282ed2a8e1bc671f38764aa3c220b870069d7aba8fa640" name="mod_session" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="5fe97d3eefcc3c255a8533b9b2c44277c5db74d3cba7877d6e07c4c79761e0bf" name="mod_ssl" arch="i686">
  <version epoch="1" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="b13da9356703e4704351d7f4354b7973a448fb333d34499298dd1be8e19358a5" name="mod_ssl" arch="x86_64">
  <version epoch="1" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="d4789b7c0857c5365fc85575266fef5377c250995c5b3cc9d40bb5a80b35a3d1" name="motif" arch="i686">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="3aa874d4716db0690e259fa13d3a0958e0ed425d793f7d577d5b96cec50332f7" name="motif" arch="src">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="b3670cc077785e35f02b1465536e4407b160f7041fc2c86d56505d619e7d92d4" name="motif" arch="src">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="2f19643d31319528eb5c16125ab5e6e4f8d60a7a28fcc5a7e9552fb7c7547eeb" name="motif" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="13035f0c241cd9d12bfbfb95c512215d82c32e0228b75c2061882abbd4a6315c" name="motif-debuginfo" arch="i686">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="ef117105a5afe754285ec48fe869ee571f56c59aaa7bf31111c5896ef371f6aa" name="motif-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="f1ac8464cc20ff636fef23352c5d63eb0955fb53ef3b862cd37abb275810f6bf" name="motif-devel" arch="i686">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="812e14e3683798ad668e9561e1e8ed209dbdce023935584d1f5852629b4a7bd0" name="motif-devel" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="c97f46d3df29c6db2fcf236e495e26818c2fa801c7e871496efbe9fa267e2802" name="motif-static" arch="i686">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="f35827f0fcad39e64564a47d1ca55595ec5a3ff126802c3ec33e8d8b4b46e961" name="motif-static" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="8280dcd51ff2b7d2b1ab5969dbfa30c65f433db1b37967d86eb1602d08146d2a" name="mutter" arch="i686">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="8986f9a915fc18e6d03b00c1742a63fb49fe3ea9083f9fe28f7b89aa6b451631" name="mutter" arch="src">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="868094242d16017312ced82684ab263c7eaab5fdcc4f80f6e1a5d62428f2f917" name="mutter" arch="src">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="7febf3dac8160a9757756f489108efe5c42b942d2fc462d574ec617fb8b9996e" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="de4dbd7b0d9f54ae9a056a21e9026966735896fb2b537352819521a14f47e974" name="mutter" arch="i686">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="4969631b937ab7b452de448732d8a8a183a5e4da8d7de68f11513aff7b03ab6b" name="mutter" arch="src">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="ad04b780bf44ea1f44e9e7006f66ddfbcbf1a6fbbbcf410f0c016cbd887b4901" name="mutter" arch="src">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="c543b59e6e09f271e9eef9d0b20f37b2de48b66f9cb493d6b5edeb51f46f8af7" name="mutter" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="9fcbd20e48375146b1bb65ecf567b96bd78343d7d9bfde1193edfaceca03be1d" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="1bd98cabb88244d812b600424eb3216647c40b8060b7683d1d5df65f09f058ad" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="e7332c58f165f07e3bd7d9085dbedfc9244f8022c5ef200fb6463ba800701e10" name="mutter-debuginfo" arch="i686">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="7332b245d6749a21b5e3b0d45623218591fcba0ab761fd16a06380e552fa8feb" name="mutter-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="3dd28566665541b68221be14ed0375dd5e27ff4133b5a88cbd1d1e8b51477720" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="8071cb7d863f3f073ce98e7d06671a8084ed52023d11309123d94ce673e6d936" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="f1d1c91b3ddd9dab6bcc9501f9f78fe3e2768152e9593cc2fe164febb60cf237" name="mutter-devel" arch="i686">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="2ec8b0b24a8f8dc12b5826650cc7fce2d27382248b0ca878f515547029cac41c" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="9b39cc554e31cfa593e70db7ecb99a113e91bded02e11af8ff8b84e5dc1f42ed" name="net-snmp" arch="i686">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="69cbaf270d86e0725bd77e4db1821666609ced9c14c2b3dddbb3f2beb127b7b6" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="fb252d5ecffb92e64770afeb05b42608c3999915fc7ee3bd905dbb32f6f9c9b4" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="314bcbe2fc2b24544b61735fa61a58aa5b02606c66d8955d98d82bde937bd0c5" name="net-snmp" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="275545433b43d33ae89c538c40054c1c5dc2cba87aaf04516b5e58ff56cf9cf3" name="net-snmp-agent-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="4a58492c20d4d5b6f1f15f96252d0bc55b1c986f35309d3561cd7b3129bd23a9" name="net-snmp-agent-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="34342a25a31e856bc943eacc2aa02e1b5a81fb1534e32a2b0a401c7630001f51" name="net-snmp-debuginfo" arch="i686">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="716051b4c8b504ff90e9527441cb6d0871a2a4387cf731a40d0d4f25b448057a" name="net-snmp-debuginfo" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="2c1e3864cba248aee60c36a4a55a9dead3da6147790a39a2965ffe0dde9765e5" name="net-snmp-devel" arch="i686">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="a69ec3d95ea7a5b586c0aeeef8af2cc56fbfc07869af5efb5ee84007ba8fe707" name="net-snmp-devel" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="6752f7cdec2e5e0a619331ccdeb19de7e12ac4420e8647962ac62c9be7a083a5" name="net-snmp-gui" arch="i686">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="3ce611dc4f3b632749e032f0b94af2d6e5d39b42daf20d3e898ab3438c04366f" name="net-snmp-gui" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="245d8bfe1e8ff39bb7b213f9b40880c1017d214a8fcfed0d44dd244ef3d9c73b" name="net-snmp-libs" arch="i686">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="2fb815b421ccc81115e35c9d3619e3e27936d3bbb23a37c18e242de2c7ec1ca4" name="net-snmp-libs" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="73310fc1f1a3543c854be6ded8147774420c185c7f0c1c12c53907ab313b835b" name="net-snmp-perl" arch="i686">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="1eb62141ce42425c22d61f22b1a8c14c5161b87c4bddb92431fa5d0c11b178f0" name="net-snmp-perl" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="67bfb851bb4a4ab7c9a7eaefb09133f9b724918835ff87a710b1a4383fcb068e" name="net-snmp-python" arch="i686">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="aba29f83cbbe7741ed9ff85e2868ff8e75d76a45842e4d1e2226ca2b720395b7" name="net-snmp-python" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="1d9fee39f6b0f6b1fe0b3028608d239eee5719f8bfa56f65f7dc7b24aaeb5772" name="net-snmp-sysvinit" arch="i686">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="668a4c7d00ae965e78df05e55ad31b319d9e2f8afbb6c9eeb94414e7afeca1d3" name="net-snmp-sysvinit" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="993f618f72f5c7d6d5277a9c937bdf2ffe9af32fd633b71fe25b5a516b98149f" name="net-snmp-utils" arch="i686">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="675bb1aafa3ebfb6736d111656a3f121302c15ed2a926aa1e5d3473d64da2361" name="net-snmp-utils" arch="x86_64">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="3e7bf05c51c81e8003c852d5627eba8044577dd01159d68a6324cb914f7ee6a0" name="nspr" arch="i686">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="925bbd52c6122f05a62f7303f3c2cccfb89ace1dce6b563c18b4a6d9c341d241" name="nspr" arch="src">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="86f20f7ee75e805535e88e228ed9cf4a5d87d7267726b272d3c0b56db8d383b4" name="nspr" arch="src">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="70ea0bb2dc02e5713f4f3f4ab3584e17908d45bda01dbbdbec896827c1bb1273" name="nspr" arch="x86_64">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="8f59929456a32f4b052353891f259ea9df94bb287fd1ba00cdc16b3216a495bc" name="nspr-debuginfo" arch="i686">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="332ecfb470b13e9f3bc8f08e42b631f5bb14c309a81587995d75da3af70b3502" name="nspr-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="39c9f1a7fe6c7edf534d31f82a2b9e944ffbdfbe6cda38886f69da81ae735441" name="nspr-devel" arch="i686">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="ccad1821407fe14f3b732ed8f3ea9718189547f6c32da2eaedb31b2d2eb4537c" name="nspr-devel" arch="x86_64">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="2b1a3fb7210859a055fa04000fd9df448dd98de5524c676a7c8e3e35c2941226" name="nss" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="055f6d3bce4985196bd0739225a2cc44bfa6d3c2ce85b957a4b320846a540ffb" name="nss" arch="src">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="2f3d61531f1f9e7bec1eef380063b93f20764c545d3429d92bf9a70af2328761" name="nss" arch="src">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="f7e28d37c6a8a9bc75bad5986e0bd8d526ad0452559b9bc086d015a3ac6de2b5" name="nss" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="4047507e1489d8fe38e40afbf7d69df8c1fd50729992c874e97d96914308a1f9" name="nss-debuginfo" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="36dd37adf49d99cc14c73f7e14f73896a6f5a183d0cb458d6b081b340aff7638" name="nss-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="57cf3c86326cb8ad4d10fa69e19115174663ba60eb40dee320670e62b6fe66e8" name="nss-devel" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="7f4da5f66cb75a4b4b61983b30c1870bae9a6bb1ba9037a9d770bcada90f786c" name="nss-devel" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="b34ee48d1a66dd87802ecabd88341997966df828afa61e21e3b067dc8f81b39a" name="nss-pkcs11-devel" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="52690ad82cfaaeb45c8457ae8b9498f6d8a245df82e0f0cdacb27f3688980230" name="nss-pkcs11-devel" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="231908cf3d8501b7cb4524019820e7a3142d13519ed49fc00df7a3646847acc8" name="nss-softokn" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="54f7f96f9c34be52a16169206b55b53336589a8c143e7258f81fd98dc976eeb9" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="cf0a89c55d3106845f1d07be406a47c0622d02661643e8919a84d8d47c270a4b" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="eb3d8d1079ec424b79a3c0da228421f19d1d35a3f4d4f0aef7d170c9a0b68056" name="nss-softokn" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="471dbae77bf2b297b87d3af4c069b61cf7de63d1c280b3fff19e4d940faf4602" name="nss-softokn-debuginfo" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="c15fa7665d57bb1afa45a3d670e0184a8c6e81720ae1ad4b3f5616c03d0adff1" name="nss-softokn-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="cc70a96d3776d7c4c959df8fe492dac599ae23cd4e57ec0a7e4c910b9e8aa3b6" name="nss-softokn-devel" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="1f5fbeaa1d01f4541b7b11592a62c5bf019018b4f487bab8200b7fafdfe20ea9" name="nss-softokn-devel" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="8d85d31abdfe6e68e86f3c5d59bd475079c078ae0fe8b9f933b58c2c2e4da69b" name="nss-softokn-freebl" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="b933285df12951a3a1e332a7e729b972824f310b0c1824ccd849dd6277f85872" name="nss-softokn-freebl" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="aa349f51b6b69753b2965bf046a7f92e2f2e0509c3d07f46b0371ba7442dcb6f" name="nss-softokn-freebl-devel" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="750fd27015e9944c4522c59a59bf67434cbab1016cf2ed679507164c0cfff702" name="nss-softokn-freebl-devel" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="bef6484f0369368482eda439ad350642f2f0b2616005f157b37316a918b4e873" name="nss-sysinit" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="15574ad0e0683a1d1257431e4c9cde580dd7448b525ad598fb00c47319d448c6" name="nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="11c3bf10abe781437a901c0b6481d7d70b74eb6d214e32573d002c6ceb0a6611" name="nss-tools" arch="i686">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="4ee89b246bc79e3f8ef8496e525991c078ca4364b175aee9a953f8e6be5fada1" name="nss-tools" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="986e887205320f8f33c57b62dfeefd157d05cf3094a80de24313aca4c4c84984" name="nss-util" arch="i686">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="77c93f14468a641e2d9a8f9d83712d5fb4b76040d35ddc873f5abfa027216f24" name="nss-util" arch="src">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="c31d76ffca8f54385523db892df46912b03d6dee6f263f1fa30d349e4a1543bb" name="nss-util" arch="src">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="ae6d2cd071e1d3f0c86bfb5ee8f9c96b8980ec146ec51ba5a558a01c1d2b2580" name="nss-util" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="850ea7fa61e5fe5b676434696754caad8e8f11ddbeb634bdb089b85c36ef3ef7" name="nss-util-debuginfo" arch="i686">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="50a274f9132b5c298514802cbc4342310051b1a57e81a0510877a04f08143e73" name="nss-util-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="ce0e5464f3248da41f3ae52798e8aa32966cdcc318d1e3860474a9c4b196c788" name="nss-util-devel" arch="i686">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="885103d8d7ec6ef0ecec8eefdacd3b5e88133d31abfd37dc7cbed31d9362609f" name="nss-util-devel" arch="x86_64">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="2d195276a7c6b1957a6346cc8b37dd927d4547bd37236f692a5c33cbed75920f" name="ocaml-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="8241569c558bcef739f94beef75eb8b2c3702fa7d7a99fdb4d046d8050e0d507" name="ocaml-libguestfs-devel" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="d8b70da17133252253f350a014adb150322bc11c3041747ac91f315ae5fbbf46" name="open-vm-tools" arch="src">
  <version epoch="0" ver="10.1.10" rel="3.el7_5.1"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 9.10.2-4" date="1439553600">- Enable PrivateTmp for additional hardening
  resolves: rhbz#1253698</changelog>
  <changelog author="Dave Wysochanski &lt;dwysocha@redaht.com&gt; - 9.10.2-5" date="1462276800">- Skip freezing autofs mounts.
  resolves: rhbz#1269956</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-2" date="1466078400">- Rebase to open-vm-tools 10.0.5 (from Fedora Rawhide)
  resolves: rhbz#1268537
- Remove PAM calls to pam_unix2.so module
  resolves: rhbz#1313071</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-3" date="1481544000">- Increase SCSI timeouts with udev rule (RHBZ#1214347).</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-4" date="1486036800">- Fix failure to quiesce filesystem when Docker containers are running
  resolves: rhbz#1406483
- Fix for deadlock when taking a snapshot
  resolves: rhbz#1398802</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.5-1" date="1488283200">- Rebase to open-vm-tools 10.1.5 from Fedora Rawhide
  resolves: rhbz#1406901
- Enable vgauthd.
  resolves: rhbz#1269243
- Add runtime dependency on pciutils (1388766).</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.5-2" date="1488283201">- Use 0644 permissions for udev rules file.
  related: rhbz#1406901</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.1.5-3" date="1489665600">- Need to add xmlsec1-openssl dependency explicitly.
  related: rhbz#1406901</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.10-3" date="1507032000">- New upstream version 10.1.10
  resolves: rhbz#1475608</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.1010-3.1" date="1528200000">- Ignore ENXIO errors with SyncDriver
  resolves: rhbz#1582123</changelog>
</package>
<package pkgid="29802c56b0c5ae1730d4873a2cbce5f197f0e668934f55ec7e1903ffe22fdf46" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="10.1.10" rel="3.el7_5.1"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 9.10.2-4" date="1439553600">- Enable PrivateTmp for additional hardening
  resolves: rhbz#1253698</changelog>
  <changelog author="Dave Wysochanski &lt;dwysocha@redaht.com&gt; - 9.10.2-5" date="1462276800">- Skip freezing autofs mounts.
  resolves: rhbz#1269956</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-2" date="1466078400">- Rebase to open-vm-tools 10.0.5 (from Fedora Rawhide)
  resolves: rhbz#1268537
- Remove PAM calls to pam_unix2.so module
  resolves: rhbz#1313071</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-3" date="1481544000">- Increase SCSI timeouts with udev rule (RHBZ#1214347).</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-4" date="1486036800">- Fix failure to quiesce filesystem when Docker containers are running
  resolves: rhbz#1406483
- Fix for deadlock when taking a snapshot
  resolves: rhbz#1398802</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.5-1" date="1488283200">- Rebase to open-vm-tools 10.1.5 from Fedora Rawhide
  resolves: rhbz#1406901
- Enable vgauthd.
  resolves: rhbz#1269243
- Add runtime dependency on pciutils (1388766).</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.5-2" date="1488283201">- Use 0644 permissions for udev rules file.
  related: rhbz#1406901</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.1.5-3" date="1489665600">- Need to add xmlsec1-openssl dependency explicitly.
  related: rhbz#1406901</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.10-3" date="1507032000">- New upstream version 10.1.10
  resolves: rhbz#1475608</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.1010-3.1" date="1528200000">- Ignore ENXIO errors with SyncDriver
  resolves: rhbz#1582123</changelog>
</package>
<package pkgid="f34b330f35fffe739ec25b74661812c25dae74f9c73afdb11beebd9319adc67d" name="open-vm-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.1.10" rel="3.el7_5.1"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 9.10.2-4" date="1439553600">- Enable PrivateTmp for additional hardening
  resolves: rhbz#1253698</changelog>
  <changelog author="Dave Wysochanski &lt;dwysocha@redaht.com&gt; - 9.10.2-5" date="1462276800">- Skip freezing autofs mounts.
  resolves: rhbz#1269956</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-2" date="1466078400">- Rebase to open-vm-tools 10.0.5 (from Fedora Rawhide)
  resolves: rhbz#1268537
- Remove PAM calls to pam_unix2.so module
  resolves: rhbz#1313071</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-3" date="1481544000">- Increase SCSI timeouts with udev rule (RHBZ#1214347).</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-4" date="1486036800">- Fix failure to quiesce filesystem when Docker containers are running
  resolves: rhbz#1406483
- Fix for deadlock when taking a snapshot
  resolves: rhbz#1398802</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.5-1" date="1488283200">- Rebase to open-vm-tools 10.1.5 from Fedora Rawhide
  resolves: rhbz#1406901
- Enable vgauthd.
  resolves: rhbz#1269243
- Add runtime dependency on pciutils (1388766).</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.5-2" date="1488283201">- Use 0644 permissions for udev rules file.
  related: rhbz#1406901</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.1.5-3" date="1489665600">- Need to add xmlsec1-openssl dependency explicitly.
  related: rhbz#1406901</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.10-3" date="1507032000">- New upstream version 10.1.10
  resolves: rhbz#1475608</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.1010-3.1" date="1528200000">- Ignore ENXIO errors with SyncDriver
  resolves: rhbz#1582123</changelog>
</package>
<package pkgid="65ab90e6b64414c4a96e12952274c9db0d80ff81a7f8eb8a5d63c805428be6bc" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="10.1.10" rel="3.el7_5.1"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 9.10.2-4" date="1439553600">- Enable PrivateTmp for additional hardening
  resolves: rhbz#1253698</changelog>
  <changelog author="Dave Wysochanski &lt;dwysocha@redaht.com&gt; - 9.10.2-5" date="1462276800">- Skip freezing autofs mounts.
  resolves: rhbz#1269956</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-2" date="1466078400">- Rebase to open-vm-tools 10.0.5 (from Fedora Rawhide)
  resolves: rhbz#1268537
- Remove PAM calls to pam_unix2.so module
  resolves: rhbz#1313071</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-3" date="1481544000">- Increase SCSI timeouts with udev rule (RHBZ#1214347).</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-4" date="1486036800">- Fix failure to quiesce filesystem when Docker containers are running
  resolves: rhbz#1406483
- Fix for deadlock when taking a snapshot
  resolves: rhbz#1398802</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.5-1" date="1488283200">- Rebase to open-vm-tools 10.1.5 from Fedora Rawhide
  resolves: rhbz#1406901
- Enable vgauthd.
  resolves: rhbz#1269243
- Add runtime dependency on pciutils (1388766).</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.5-2" date="1488283201">- Use 0644 permissions for udev rules file.
  related: rhbz#1406901</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.1.5-3" date="1489665600">- Need to add xmlsec1-openssl dependency explicitly.
  related: rhbz#1406901</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.10-3" date="1507032000">- New upstream version 10.1.10
  resolves: rhbz#1475608</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.1010-3.1" date="1528200000">- Ignore ENXIO errors with SyncDriver
  resolves: rhbz#1582123</changelog>
</package>
<package pkgid="cb22a2ad91bc9a75d57126cbe61e8ef967598d0f33678612b21d7f8072633f77" name="open-vm-tools-devel" arch="x86_64">
  <version epoch="0" ver="10.1.10" rel="3.el7_5.1"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 9.10.2-4" date="1439553600">- Enable PrivateTmp for additional hardening
  resolves: rhbz#1253698</changelog>
  <changelog author="Dave Wysochanski &lt;dwysocha@redaht.com&gt; - 9.10.2-5" date="1462276800">- Skip freezing autofs mounts.
  resolves: rhbz#1269956</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-2" date="1466078400">- Rebase to open-vm-tools 10.0.5 (from Fedora Rawhide)
  resolves: rhbz#1268537
- Remove PAM calls to pam_unix2.so module
  resolves: rhbz#1313071</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-3" date="1481544000">- Increase SCSI timeouts with udev rule (RHBZ#1214347).</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.0.5-4" date="1486036800">- Fix failure to quiesce filesystem when Docker containers are running
  resolves: rhbz#1406483
- Fix for deadlock when taking a snapshot
  resolves: rhbz#1398802</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.5-1" date="1488283200">- Rebase to open-vm-tools 10.1.5 from Fedora Rawhide
  resolves: rhbz#1406901
- Enable vgauthd.
  resolves: rhbz#1269243
- Add runtime dependency on pciutils (1388766).</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.5-2" date="1488283201">- Use 0644 permissions for udev rules file.
  related: rhbz#1406901</changelog>
  <changelog author="Ravindra Kumar &lt;ravindrakumar@vmware.com&gt; - 10.1.5-3" date="1489665600">- Need to add xmlsec1-openssl dependency explicitly.
  related: rhbz#1406901</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 10.1.10-3" date="1507032000">- New upstream version 10.1.10
  resolves: rhbz#1475608</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 10.1010-3.1" date="1528200000">- Ignore ENXIO errors with SyncDriver
  resolves: rhbz#1582123</changelog>
</package>
<package pkgid="53f597d27bf7f1d73cf9f333c1a851264be7855d694cea7f4de09d75271c0d60" name="openldap" arch="i686">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="b1b45de5673038351b00078409b702eec1d9d0b182bfb82206c056c611d35083" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="f9eb60ce99daa694d8cee6e741c842b32278ce5f21a83c9db151824ff5bcf539" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="69993251ca19fa618ed39aa8b44ce4352c4eba71018570a3790a849c0b29a08e" name="openldap" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="4f28a70db0da2428b0968a90aaaf0cbc152a61fdda4c7b0cfdc893b819ba3f6c" name="openldap-clients" arch="i686">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="c7e64f2584d7790d341699f7e08a17b192f8a8836736106c42f3a6c21c445218" name="openldap-clients" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="4d1c7e5b2145645b561eab6530aec12746d7ad6a6d387b714f97bf924b44249b" name="openldap-debuginfo" arch="i686">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="90c1f71efec86c52ec8e3f31363155c00786d98fdc4f7f7d4e4fdbcf159e274d" name="openldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="8b45cbaba0f5a52f6b47b2d7b264719ebd962cc3a7007bbc40139a0ecff45997" name="openldap-devel" arch="i686">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="172573fd28ae7f004728c77c82a476afd40c4d83070e4bfb99556d096b75fc42" name="openldap-devel" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="4bf7ff2518e386dead1e5f82c05a4763baec93fd6e31bac7e044c1cf6b263ce3" name="openldap-servers" arch="i686">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="b9b738f09c326054fe7e1c09268b25640836e3fbb48ea7cc6c6f244a8b43d15b" name="openldap-servers" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="05a3492be9615c4c1fef998035391afd5d58809327117b59eed94f3fccf94b77" name="openldap-servers-sql" arch="i686">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="e047878afa09ba876f964c58e6c08e48c85c965740127f820e0cdf3972c532c4" name="openldap-servers-sql" arch="x86_64">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="449c1f99a6858548a82f4d1bd3d3320eed9fa3534da65e26c34fb4f15e04aef4" name="openscap" arch="i686">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="91fd63a6942381ee597cfaa54fff6193e33bf23bb428bcf04d04017d5c1ef874" name="openscap" arch="src">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="f29d9bae44235ab3f51c710df9b6feff481e6c97af2123a2468a12461b07a1ff" name="openscap" arch="src">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="6e38c2c6854e8b4bf918568a51f29fa04b9f3beee2355041f6a7c50163ec9701" name="openscap" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="1850076cc2095c47d788318d1e41eb4cfe9f42c4d70d8c923666ee749759ea60" name="openscap-containers" arch="noarch">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="c5f74b362a373033688d00c6472b0c20e935686b2775ae2c8bca711ed88a0d85" name="openscap-containers" arch="noarch">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="876101d1f8ea4d92356f560c9ecb8f0b4fd3a7968b26691f305110385c8e871a" name="openscap-debuginfo" arch="i686">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="2d037c99d4313d4dabd53ec1e5a9c76b9f0899cb8d7e363d9d1dff73f19bb748" name="openscap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="1db404f34edbcd82a78e25662837e8ab53fa918bbeebc8726b9014d4be050499" name="openscap-devel" arch="i686">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="2b35928f4c46a6ac55dbd772780e838202429ca5000998224621b3968fb1d243" name="openscap-devel" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="9e57fb4770ea5c39a35e9983e53f59c0bd92890d3318f864635a13bee983f2ba" name="openscap-engine-sce" arch="i686">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="24347eaf9720340838ab615cd223ed7e4412e8a798b642d26fe5810fcad88f02" name="openscap-engine-sce" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="c6d90f92e47ab786a1ed00ab059bc814909d2484c7ddfae98d83a04c993c0113" name="openscap-engine-sce-devel" arch="i686">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="64cd2b5ba323ea3ea12dc229b45252819eafb0c32c206920542d41f83d61b00b" name="openscap-engine-sce-devel" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="d089da5e364c9c1f6d1d2da769a0465506bb6afd8386e2727f9194d23844d24f" name="openscap-extra-probes" arch="i686">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="e63018f26f7c35e24a4ab1e75237d901f7cf9a5badaf3feb767fa10726cedf2a" name="openscap-extra-probes" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="85d4a7c664cdbfde86f407c1edd3b9a625776489fcb7e70bb27516e452fd4dc4" name="openscap-python" arch="i686">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="697529fcb7c0890a9be8d3366c85db96d94d0a4e4a1c48cf90a5332d3470b567" name="openscap-python" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="3045348a7afc46b602587940d42195febecf749bc5bf62e62f801d9b691d8f9f" name="openscap-scanner" arch="i686">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="7c5b599987834e84da329b701713cb5a2a24cf147c75a3fd2ede34b83621a45c" name="openscap-scanner" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="770c1120a0fe9dcbf14da13d8141ceebe2d4fb716b326601905e128a51f2b04a" name="openscap-utils" arch="i686">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="668577f5c9eb068f6dca93b119beb69d68327dc6b2225f0d8a0ddc34bc149671" name="openscap-utils" arch="x86_64">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="fb3e528651f3f7805f841acd1a02df2e32d356fa8a0e24a7a3c184c6050ee85e" name="openslp" arch="i686">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="e55edce8845ba40cf7d5548aa6135cedb75d084ecf01cb35d3629a18b2094871" name="openslp" arch="src">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="fc39ecfa9842e6a023bea59956035e56dfd5130b6a1f5322b9c04bc30e79ae99" name="openslp" arch="src">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="4ea0bfb32616cb3a7149eb4d551a3a623a2ae947634138125027f0b85b746e4e" name="openslp" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="8cc8cc50a795931e58907371ec13e81c21cfa92b0ebce4dbdb3630439549c366" name="openslp-debuginfo" arch="i686">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="aa01745f954c2dfb4c821e14369846fffdbf37eff9d1038c15919e6d6e30b8a1" name="openslp-debuginfo" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="1f9953da4c6be64f7db54bb41203acb3bd944c2b20e5b92be3824c7088b7a32b" name="openslp-devel" arch="i686">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="9a526290f9c47a6c8eb4f13896cc63a5b8d850dda6d6d7c078afc6a7ebe6c653" name="openslp-devel" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="d396230c1ee5b8fffa10cab147501974844a8d8417120dd48d0d5398762ecafe" name="openslp-server" arch="i686">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="400ec68592ee9e56b0cecef07fc9b8a7c940a53771a2079190cffaf6a875d51e" name="openslp-server" arch="x86_64">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="466956ffc5dc0cd5a41ab52e663fc027e97c5cdeb11854dcbed95d5de41f5195" name="oprofile" arch="src">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="4cf07372f99aa7112acb65549d812d540ec860dd75b885752a4f728e713e8886" name="oprofile" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="2d4340dd53f4ad3fecdc574ad2c1ab900e370cc01d12f573326328527868044b" name="oprofile-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="82526b4f86fee4e810879d393be154fcfe2d95e8c0f82b43446747f4a2b1aab6" name="oprofile-devel" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="db1ac28ac6887e5643e4d5e4df36b2125e70fb009c2a7d106914a438a273fc38" name="oprofile-gui" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="5dafa9f8425e55883ad1d63911c38c9ac0d90a9dd00b380c42002f3f43a81ecc" name="oprofile-jit" arch="x86_64">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="ee322b7b486e0347dbb5071d5938725da1281ce8d72859e95438ea535f657a3c" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="5c3967a27e00fbacb1e8f855c429f4d143c6f9d3166894ac5c8bae88da5d5ff7" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="be537233150b540bef195a527d4662a640f09ecc7fcf477a5531a38621bbfb76" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="af8f189ae4baef5782d437ed991c939e1219df6d349458862b1fcbc5d04ec252" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="45432b525a6cd64df561e341d8cae49e51da72f966bf1a6da0d342e5b5f70a15" name="pacemaker" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="5233eddbffe43a910102ff08581d68fddbd6f65d92e6b57a5be9fa674b5d76d4" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="6208e2340a48567ec44cf66856eb5cb2449b59617bdc49a75b267b76125ba0b7" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="460864af53646e536e54858e37b86fb19c59bb6019b256df05c01382f9825f0f" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="c12e27413b2fb2364d3121d1914626649f40dbb7658bf336cf818a739d40b078" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="9a495b84641343e983169c8e8e684cb7766a2737c3555ac7e4566714f2bdf0d6" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="3c77d3457d48b50a745835973c59c7af65ef4f3e04c0df2cc173e26cc73ce175" name="pacemaker-cli" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="ef155d70b2995208e0c1315730b027a4d74237eb582b154b1facd282078f3428" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="37fdfd824c6957017166d8f7741975c723c47bcb5944386211a99dd26f7be414" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="6739d3d3a4b0ef81a2620cb51d7ab580c886c5d9bae7f2078a486696035f2a18" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="563cae982029c0f66b03a4e258d2847cbc9e600148607c2b000bc336eb2b8c1a" name="pacemaker-cluster-libs" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="2f0be4d72cd882880177c249874751ef838c15361fa8951a56850f81a5d11ac6" name="pacemaker-cluster-libs" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="56f7a373a6515f9c4cf9394974703fddc52cd6829c876dd2e8e10a4d4c4e2dab" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="254290c04d42dd4e27c81644a17a9890312c290f3cb65547b78f09729895d71a" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="1f3b7352fecae773c579d543012da9b60659b8ff0504ab30ce440950515c4f14" name="pacemaker-cts" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="018e40b2e61abec713ac11273d49e8c6dd770d7b6b46fdc4f32555d093820204" name="pacemaker-cts" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="1bd3472908cada04522006b1b5965599e2b0393f42630f9af3a64cc99d568a0b" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="5b160f4cb95cef0491fbc31bfe74d19a0d30b95b5b3ed9a28e56b5a0dc2cdb45" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="c78640c77534d706b1767111d020141f4d709077a483ef714899217c7995a21f" name="pacemaker-debuginfo" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="10181809a7e11d6ccba396adfe9a5c9c2e6b0560eac6d02457e355e7c1067ea3" name="pacemaker-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="f59131abbbf644c56c431e2f4e382dd9cc948d0d8ddea2426df8d76eb580afbd" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="9cecf019f613d9b91c378dec385ef2a5f4f06776f1ab29878c5f6cae05d8d695" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="e1127d2587733f10be3e13e51751e6a5ee932c42c5e5174d0acf5621ec0bfa7a" name="pacemaker-doc" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="73fd21b7cc3ba95f122f26f9df0f04d459d67be87797f996ba47e3df9e2477e2" name="pacemaker-doc" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="3dc786a97eb71529122058fdcaec6bee9bdbbc18eb09da0ec8c8f4b4687d459d" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="2fee3078eb0350e03ae47199390ee3eba1b3c823e9383a986f104588b5120f9c" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="0383f1b83ac929ad8d82c36615a0324742184103f524922e8b0825091c4f72a6" name="pacemaker-libs" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="9f31762a91364573b525ae8903ed42fde26fb46515e185040a529d39436d0140" name="pacemaker-libs" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="4ee569875b3b3cb7cb26747a365344023ea870908a2cc3de42386e80e95c1a6a" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="77bb273e1a20645f70122f8756261a18889b8b61452e17b3ff9e2a9ff76aad7a" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="4d114d4f0aade0813c0aa747465284cee6161fb0f871dcc850bebdb58e1d421c" name="pacemaker-libs-devel" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="17edbc7a8824678f010b850bc3872cc466221f925eea9109815fba64390de18f" name="pacemaker-libs-devel" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="a89a81b985b4548a8798039aed7b86215a16eaf22ad16804524a1573768ee38b" name="pacemaker-nagios-plugins-metadata" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="29b1d8ee2f70e131310a2c15617c39e4e4bcaee92d79a4d27e0fb608a88078de" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="eb55802ea82b08ca10ea02ca8ee2247c7fe9cc820cedf5e35f4dd2d6ba3b5b21" name="pacemaker-nagios-plugins-metadata" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="fb555a5b260588c3db731719a20a53b1b86d57b66d6d0208bcd0717143dad4d8" name="pacemaker-nagios-plugins-metadata" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="e50834d19ce2c49e0f1658643a6af92ab8aa1107695fec3550527bb072705a60" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="8e32a555c7a15ecb1685adbb7f959724cd8757e93ceac36a66c1c2a7f69d481e" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="20b251f8db896fc382bb42db34bd1e8a30602a6605cf21fd110700d2b929a963" name="pacemaker-remote" arch="i686">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="cca859c11e09129ca439a9547e9aa2164c3b6e21b390bdf217fcc39a5d1fe05a" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="ee47bbd3f5d4e44f1dd91bd355797737137d3f1bbec65d31dc738db5e917e58a" name="patch" arch="i686">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="54d70f02b117d1a2cdb97b1cbc63e99dacc99a370707a6fd39b6d48c0cc261e3" name="patch" arch="i686">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="3566f37011c1f89d47e6dcc29e24fd685faa82ef744f365ea140306161c71bcc" name="patch" arch="src">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="06ab1308bbb9c65e1986348daf838916712886e9b69914d0bd54cc29ed933582" name="patch" arch="src">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="66930902dfddd6c7beac28ac6abfcfb89545911fd3d97103bb27aff8d635b194" name="patch" arch="src">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="a79e3798262b6203e29d125ec9f32df5d637921a9906fb6cb1eeadd1eaea0393" name="patch" arch="src">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="9c06cb181309b7fa253d935388a18da98f71b6e0bff383f5f18121fc926fd511" name="patch" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="2f9f701f30bda2ba4028a2a379822d93448bcaf02ddfbc92181c273630584efa" name="patch" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="4f650b7037dbfa8f409b2faed32de79aa64599f5c5d843668a41d54d7fd472b3" name="patch-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="6a3a848aadafd0c4c365ecceec7ba838760d355e2bc2b3449740f702294e856d" name="patch-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="ce4a2393d3c1d2856c05032da6a5e3e02b6c5272f86b9ebb812537c294f3a8a3" name="patch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="6a5b23a564fce710fdc6c63cf58410445be97a5572b9ad81603d6a768177dd44" name="patch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.1" rel="10.el7_5"/>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-1" date="1350561600">- Fixed license (since 2.6 it has been GPLv3+).
- 2.7.1.</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.7.1-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-3" date="1363003200">- Upstream patch to fix removal of empty directories (bug #919489).</changelog>
  <changelog author="Ville Skytt&#xE4; &lt;ville.skytta@iki.fi&gt; - 2.7.1-4" date="1364212800">- Build with xattr support.
- Make build output more verbose.
- Fix bogus date in %changelog.</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-5" date="1365681600">- Don't document unsupported -m option; document -x option (bug #948972).</changelog>
  <changelog author="Tim Waugh &lt;twaugh@redhat.com&gt; 2.7.1-6" date="1371038400">- Don't segfault when given bad arguments (bug #972330).</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-7" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.7.1-8" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-9" date="1523275200">- Fixed CVE-2018-1000156 - Malicious patch files cause ed to execute arbitrary commands</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 2.7.1-10" date="1523620800">- Fixed Coverity reported issues</changelog>
</package>
<package pkgid="dfe2718f1fb791ab2195adab6d82bfbfa5a639d8fad477f04cbb97faeb9f7e1b" name="pcs" arch="i686">
  <version epoch="0" ver="0.9.162" rel="5.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.160-1" date="1507723200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.161-1" date="1509624000">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-1" date="1510747200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-2" date="1512993600">- Changed snmp agent logfile path
- It is now possible to set the `action` option of stonith devices in GUI by using force
- Do not crash when `--wait` is used in `pcs stonith create`
- A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
- Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-3" date="1515153600">- Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
- Fixed a crash in the pcs booth sync command
- Resolves: rhbz#1464781 rhbz#1527530</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5" date="1517832000">- Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
- Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
- Resolves: rhbz#1415197</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.9.162-5.el7_5.1" date="1523448000">- Manually Debranding</changelog>
</package>
<package pkgid="e8c1577565f82370fb0e2a83a64e933b655e0a5872288740ac16f1d63c05d5bc" name="pcs" arch="src">
  <version epoch="0" ver="0.9.162" rel="5.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.160-1" date="1507723200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.161-1" date="1509624000">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-1" date="1510747200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-2" date="1512993600">- Changed snmp agent logfile path
- It is now possible to set the `action` option of stonith devices in GUI by using force
- Do not crash when `--wait` is used in `pcs stonith create`
- A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
- Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-3" date="1515153600">- Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
- Fixed a crash in the pcs booth sync command
- Resolves: rhbz#1464781 rhbz#1527530</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5" date="1517832000">- Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
- Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
- Resolves: rhbz#1415197</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.9.162-5.el7_5.1" date="1523448000">- Manually Debranding</changelog>
</package>
<package pkgid="2f8d13fdfa150bf2d8acd7a5a3f7c667753ad623b88f7575810ea688c149594c" name="pcs" arch="src">
  <version epoch="0" ver="0.9.162" rel="5.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.160-1" date="1507723200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.161-1" date="1509624000">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-1" date="1510747200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-2" date="1512993600">- Changed snmp agent logfile path
- It is now possible to set the `action` option of stonith devices in GUI by using force
- Do not crash when `--wait` is used in `pcs stonith create`
- A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
- Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-3" date="1515153600">- Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
- Fixed a crash in the pcs booth sync command
- Resolves: rhbz#1464781 rhbz#1527530</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5" date="1517832000">- Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
- Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
- Resolves: rhbz#1415197</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.9.162-5.el7_5.1" date="1523448000">- Manually Debranding</changelog>
</package>
<package pkgid="4f8dc5597a7659391a232d1f7fbe915206c1b84db05efccf2993d5ffb713e068" name="pcs" arch="x86_64">
  <version epoch="0" ver="0.9.162" rel="5.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.160-1" date="1507723200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.161-1" date="1509624000">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-1" date="1510747200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-2" date="1512993600">- Changed snmp agent logfile path
- It is now possible to set the `action` option of stonith devices in GUI by using force
- Do not crash when `--wait` is used in `pcs stonith create`
- A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
- Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-3" date="1515153600">- Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
- Fixed a crash in the pcs booth sync command
- Resolves: rhbz#1464781 rhbz#1527530</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5" date="1517832000">- Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
- Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
- Resolves: rhbz#1415197</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.9.162-5.el7_5.1" date="1523448000">- Manually Debranding</changelog>
</package>
<package pkgid="c3e37dea48a3e14979da13347a35e85618c2d2aa7475765be9dc8f0f7119a3f6" name="pcs-debuginfo" arch="i686">
  <version epoch="0" ver="0.9.162" rel="5.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.160-1" date="1507723200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.161-1" date="1509624000">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-1" date="1510747200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-2" date="1512993600">- Changed snmp agent logfile path
- It is now possible to set the `action` option of stonith devices in GUI by using force
- Do not crash when `--wait` is used in `pcs stonith create`
- A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
- Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-3" date="1515153600">- Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
- Fixed a crash in the pcs booth sync command
- Resolves: rhbz#1464781 rhbz#1527530</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5" date="1517832000">- Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
- Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
- Resolves: rhbz#1415197</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.9.162-5.el7_5.1" date="1523448000">- Manually Debranding</changelog>
</package>
<package pkgid="3c171d2313bfcc539107996e1582a494391e87b85a666e96e1f06d5a65df75d8" name="pcs-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.9.162" rel="5.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.160-1" date="1507723200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.161-1" date="1509624000">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-1" date="1510747200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-2" date="1512993600">- Changed snmp agent logfile path
- It is now possible to set the `action` option of stonith devices in GUI by using force
- Do not crash when `--wait` is used in `pcs stonith create`
- A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
- Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-3" date="1515153600">- Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
- Fixed a crash in the pcs booth sync command
- Resolves: rhbz#1464781 rhbz#1527530</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5" date="1517832000">- Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
- Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
- Resolves: rhbz#1415197</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.9.162-5.el7_5.1" date="1523448000">- Manually Debranding</changelog>
</package>
<package pkgid="c8ec57a98d1ea32a24b93e985cb901405cd970ec480d2894ef8e2ae08ec3741d" name="pcs-snmp" arch="i686">
  <version epoch="0" ver="0.9.162" rel="5.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.160-1" date="1507723200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.161-1" date="1509624000">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-1" date="1510747200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-2" date="1512993600">- Changed snmp agent logfile path
- It is now possible to set the `action` option of stonith devices in GUI by using force
- Do not crash when `--wait` is used in `pcs stonith create`
- A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
- Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-3" date="1515153600">- Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
- Fixed a crash in the pcs booth sync command
- Resolves: rhbz#1464781 rhbz#1527530</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5" date="1517832000">- Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
- Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
- Resolves: rhbz#1415197</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.9.162-5.el7_5.1" date="1523448000">- Manually Debranding</changelog>
</package>
<package pkgid="15d07ad9364b57b90c07c03147a98acdc9af94cb2213ac056ad2ab962ef89c92" name="pcs-snmp" arch="x86_64">
  <version epoch="0" ver="0.9.162" rel="5.el7.centos.1"/>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-5" date="1496923200">- `pcs cluster setup` uses existing pacemaker authkey if it exists
- `pcs resource create` shows only warning when case of remote node is detected
- Resolves: rhbz#1459503</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.158-6" date="1497528000">- It is now possible to disable, enable, unmanage and manage bundle resources and set their meta attributes
- Fixed timeout when cluster setup takes long time in web UI
- It is now mandatory to specify container type in the "resource bundle create" command
- Resolves: rhbz#1447910 rhbz#1284404</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.160-1" date="1507723200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1443647 rhbz#1432283 rhbz#1421702 rhbz#1443418 rhbz#1464781 rhbz#1435697 rhbz#1441673 rhbz#1420437 rhbz#1388783 rhbz#1463327 rhbz#1418199 rhbz#1341582 rhbz#1489682 rhbz#1491631 rhbz#1213946</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.161-1" date="1509624000">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1499749 rhbz#1415197 rhbz#1501274 rhbz#1502715 rhbz#1230919 rhbz#1503110</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-1" date="1510747200">- Rebased to latest upstream sources (see CHANGELOG.md)
- Resolves: rhbz#1389943 rhbz#1389209 rhbz#1506220 rhbz#1508351 rhbz#1415197 rhbz#1506864 rhbz#1367808 rhbz#1499749</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-2" date="1512993600">- Changed snmp agent logfile path
- It is now possible to set the `action` option of stonith devices in GUI by using force
- Do not crash when `--wait` is used in `pcs stonith create`
- A warning is displayed in `pcs status` and a stonith device detail in web UI  when a stonith device has its `method` option set to `cycle`
- Resolves: rhbz#1367808 rhbz#1421702 rhbz#1522813 rhbz#1523378</changelog>
  <changelog author="Ivan Devat &lt;idevat@redhat.com&gt; - 0.9.162-3" date="1515153600">- Pcs now properly exits with code 1 when an error occurs in pcs cluster node add-remote and pcs cluster node add-guest commands
- Fixed a crash in the pcs booth sync command
- Resolves: rhbz#1464781 rhbz#1527530</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5" date="1517832000">- Fixed `pcs cluster auth` in a cluster when not authenticated and using a non-default port
- Fixed `pcs cluster auth` in a cluster when previously authenticated using a non-default port and reauthenticating using an implicit default port
- Resolves: rhbz#1415197</changelog>
  <changelog author="Ondrej Mular &lt;omular@redhat.com&gt; - 0.9.162-5.el7_5.1" date="1521633600">- Fixed CVE-2018-1086 pcs: Debug parameter removal bypass, allowing information disclosure
- Fixed CVE-2018-1079 pcs: Privilege escalation via authorized user malicious REST call
- Fixed CVE-2018-1000119 rack-protection: Timing attack in authenticity_token.rb
- Resolves: rhbz#1557253</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.9.162-5.el7_5.1" date="1523448000">- Manually Debranding</changelog>
</package>
<package pkgid="134367072db244a9ca81a606216cb5e063848751f19abffd2869efc01c569857" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="f41394824db748e4e3b94fe5c10a1c9fd3b4e9067454be0608e09145c87e10da" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="7ee2b49648de064a8195b352bbca6c298e2b44d71b7d1735fe1a202e4c02b3cc" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="2ec4927ce08b27730a81be6b693ffb7ecb24e8cd1158346567161a91112bdc26" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="303a8eda2fcba13962dd51b82d61642b906041b35255ad9c1deb7b3b83b71f33" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="3b9d238a58db65f653c0894fc8b58eecaca5cf005735f2cbcd538a2c138e6766" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="254b2e4e8bd8057b5b5b4a148d0bb47364602beea9bbc6e8ef5143dbd45897be" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="818ff9b86565aa9e13b4269e9e2d7becc78019ed8496bde727a8ff8847aa92a2" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="d616ce9933126464e9f8e7b4c3882564731da7c9d2170bad8ba07385759b8adb" name="perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="be73158790093f9b8d8bebd0fe9ca4835ee39b9b47d4c6fa746de6f38d1617f6" name="perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="6822ee640fa74d303ba3c2570986dd3a554001b2ed47e2c328473916f9c1a5b0" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="d4c55c89634400d599b55416c53cbac91b56818ae7add1cd7906601f8758796e" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="3961f4bd74fbe0a74b6fa236fe5b1fa30ae1110bf20f8826330d1303290d3285" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="a504aeecaaf4a4691d1b9e8764e60e61b919bad3626a3651569cd3bd5c05b47f" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="490da9f4058754daffffa701ab7eabf3e8ff10ff8fa43f2e64555b3384980f7e" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="a52179eec2a91b0656936a2e5117e135a867749b90fa25d0ac4448717ce1b1f4" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="6e61adf46bf2cee1abadb1af1607686bf66d91e22f3aa018e2f3ef19ec6a6c1f" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="5708fcc155b4899c542e8e635755019997526f5b51fe9da04d310f45724adf97" name="perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="3ab649e095fed3eab7f27193ffc85faec33e8b630212a3d9e8b287c5e3fbf410" name="perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="91424843f972db3621bd9f88d22880d3aab2d2b602dcdf431cbd2b1aded06fd4" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="14e93fc5309cee467a2c8e1627e93447b96ab75b88fbad7595b43b670b38e7e9" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="0dbd07c6bd000b9aed114716320a0a2aff306a4f5309b6f9e48cfc61cfc5dc80" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="83c39612b5657cfafca85f9180acf1f3082d6cb5d9ac81cd06c2c3402d1ea122" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="3d4ce3f22a9e373b64582a710906dc370cc2235e20bce37f390772c78470672f" name="perl-Sys-Guestfs" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="0c68e451600194251b0926b3148f0354b5e4aa4db2ff012e0ae7af9018f47130" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="4a58d00bc547659f7abbff767830385628b0fb747262715a2f5d56e7a15c2202" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="3926da384eb5d727b5e4eb19982632592d197498ddabad5775924f5213841a44" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="0a2d39a5f25994540621d11e54d5c8407b004dac7d0107a13cb58fe9c07094d9" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="ae248586935bbcac33d93e29977faab23a70d1eeb1c555508a1436c1a8f666e5" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="50e19f64b788022bb840395243bd8c45d3aee1174921d315a3dc0de12552008c" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="5672929bf9c9bf62d5b5d8fce5a881dbd327d94582b949ce415b7eed40b4de26" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="f8e073ce9142dda67d63a7df1d96d31b22edaba24743a4d5523522f5427d370b" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="279a3bbdf6c4265ffafdaf2451a892c13c5b6c951b30bb859de4a79596de9174" name="pki-core-debuginfo" arch="i686">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="0f0b9b7585db04e9b774bb73531baafdd3b59c1e7b998f1ec8e6598cfe3fd9d6" name="pki-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="b4f796096deeb77468e9b72db998b50717b223ac93d334f489470825e9dff841" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="b2bb424027b8bdd6985b4c09a58158d31f9e39e3993df63001288c6e337ee482" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="26c3a338377f0723f61000117eca982d70c3cab6467487a799dfd95091d4c0cf" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="6b3f9d8b605e4c81ae03da4cd860edeb640194d3dbb9609e2856ba8c802acb8c" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="bf30a3a706734473af63c56b4baed2f95f7d357c46d780a38348ac453571b4d2" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="d9eeedb814336e83cefb95660a67d4afb546e14e0d4d3d22233adb56aeb88ce4" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="fcaea6da201cb6379f227fdc6a3c356c6b37687b64f8905e66e1de28c8f369e8" name="pki-symkey" arch="i686">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="1984df926332e39a7786c545e78847dbf74d9df11f7a5ba9332194f63b81ee2f" name="pki-symkey" arch="x86_64">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="99e6aa81a375a58804d1e5a3fe5108dc4ae74545c2f7f2af6139e65c38c7f57c" name="pki-tools" arch="i686">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="d66817ae2261da5b15bbc3654dab0b4e28ab112083806a2d1869ca45e3f63219" name="pki-tools" arch="x86_64">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="0703ddd8ce9cb329946126a2cb099b8f084d42289d5935bafa9bdb8f143b0ac6" name="plexus-archiver" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="5.el7_5"/>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0:2.2-3" date="1353585600">- Migration to plexus-containers-container-default</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.2-4" date="1353672000">- Add ASL 2.0 license text to packages</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:2.2-5" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:2.2-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.3-1" date="1365681600">- Update to upstream version 2.3
- Use apache-commons-compress for bzip2 (de)compression
- Resolves: CVE-2012-2098</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-1" date="1369396800">- Update to upstream version 2.4.2
- Remove patch for CVE-2012-2098 (accepted upstream)</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.4.2-2" date="1371124800">- Update to latest packaging guidelines
- Remove MIT license (only applies to test cases not binary rpm)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-3" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 02.4.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-5" date="1527854400">- Fix arbitrary file write vulnerability
- Resolves: CVE-2018-1002200</changelog>
</package>
<package pkgid="728afaa1e1943d5501a29d869d33307bf17e990b88f33e2fca3f38eb165a768c" name="plexus-archiver" arch="src">
  <version epoch="0" ver="2.4.2" rel="5.el7_5"/>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0:2.2-3" date="1353585600">- Migration to plexus-containers-container-default</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.2-4" date="1353672000">- Add ASL 2.0 license text to packages</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:2.2-5" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:2.2-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.3-1" date="1365681600">- Update to upstream version 2.3
- Use apache-commons-compress for bzip2 (de)compression
- Resolves: CVE-2012-2098</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-1" date="1369396800">- Update to upstream version 2.4.2
- Remove patch for CVE-2012-2098 (accepted upstream)</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.4.2-2" date="1371124800">- Update to latest packaging guidelines
- Remove MIT license (only applies to test cases not binary rpm)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-3" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 02.4.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-5" date="1527854400">- Fix arbitrary file write vulnerability
- Resolves: CVE-2018-1002200</changelog>
</package>
<package pkgid="d0e5b479c25073b05c559d54c50a2d8dfa85100e9c54bd120b6064be8812fa86" name="plexus-archiver-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="5.el7_5"/>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0:2.2-3" date="1353585600">- Migration to plexus-containers-container-default</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.2-4" date="1353672000">- Add ASL 2.0 license text to packages</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:2.2-5" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:2.2-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.3-1" date="1365681600">- Update to upstream version 2.3
- Use apache-commons-compress for bzip2 (de)compression
- Resolves: CVE-2012-2098</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-1" date="1369396800">- Update to upstream version 2.4.2
- Remove patch for CVE-2012-2098 (accepted upstream)</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.4.2-2" date="1371124800">- Update to latest packaging guidelines
- Remove MIT license (only applies to test cases not binary rpm)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-3" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 02.4.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-5" date="1527854400">- Fix arbitrary file write vulnerability
- Resolves: CVE-2018-1002200</changelog>
</package>
<package pkgid="c2a9fedd32cf54d92a24f8e92b81f7cf45285f90b03f84a3df491cd621a8df91" name="postgresql-jdbc" arch="noarch">
  <version epoch="0" ver="9.2.1002" rel="6.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.1.901-4" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.1.902-1" date="1342958400">- Update to build 9.1-902</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1001-1" date="1352808000">- Update to build 9.2-1001 for compatibility with PostgreSQL 9.2</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1002-1" date="1352894400">- Update to build 9.2-1002 (just to correct mispackaging of source tarball)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790400">- don't use removed macro %add_to_maven_depmap (#992816)
- lint: trim-lines, reuse %{name} macro, fedora-review fixes
- merge cleanup changes by Stano Ochotnicky</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790401">- add javadoc subpackage</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 9.2.1002-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-6" date="1524225600">- fix incompatibility with 9.6+ (rhbz#1547424)
- it's unnecessary to depend on whole java (rhbz#1406931)</changelog>
</package>
<package pkgid="a85d27c9faf39865ad58a488e90c7e9159b66c00a41b8cc861a60e4d85d2f482" name="postgresql-jdbc" arch="noarch">
  <version epoch="0" ver="9.2.1002" rel="6.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.1.901-4" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.1.902-1" date="1342958400">- Update to build 9.1-902</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1001-1" date="1352808000">- Update to build 9.2-1001 for compatibility with PostgreSQL 9.2</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1002-1" date="1352894400">- Update to build 9.2-1002 (just to correct mispackaging of source tarball)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790400">- don't use removed macro %add_to_maven_depmap (#992816)
- lint: trim-lines, reuse %{name} macro, fedora-review fixes
- merge cleanup changes by Stano Ochotnicky</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790401">- add javadoc subpackage</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 9.2.1002-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-6" date="1524225600">- fix incompatibility with 9.6+ (rhbz#1547424)
- it's unnecessary to depend on whole java (rhbz#1406931)</changelog>
</package>
<package pkgid="86e2aa16514eae9d90cc8b859790be53f1f09ab6e51cdc5f85e94e95f0490f78" name="postgresql-jdbc" arch="src">
  <version epoch="0" ver="9.2.1002" rel="6.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.1.901-4" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.1.902-1" date="1342958400">- Update to build 9.1-902</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1001-1" date="1352808000">- Update to build 9.2-1001 for compatibility with PostgreSQL 9.2</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1002-1" date="1352894400">- Update to build 9.2-1002 (just to correct mispackaging of source tarball)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790400">- don't use removed macro %add_to_maven_depmap (#992816)
- lint: trim-lines, reuse %{name} macro, fedora-review fixes
- merge cleanup changes by Stano Ochotnicky</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790401">- add javadoc subpackage</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 9.2.1002-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-6" date="1524225600">- fix incompatibility with 9.6+ (rhbz#1547424)
- it's unnecessary to depend on whole java (rhbz#1406931)</changelog>
</package>
<package pkgid="74039e25650691d8f4e9e8ce435bc04d6b08fe5bfb9b4899d0c8f7857a1f2759" name="postgresql-jdbc" arch="src">
  <version epoch="0" ver="9.2.1002" rel="6.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.1.901-4" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.1.902-1" date="1342958400">- Update to build 9.1-902</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1001-1" date="1352808000">- Update to build 9.2-1001 for compatibility with PostgreSQL 9.2</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1002-1" date="1352894400">- Update to build 9.2-1002 (just to correct mispackaging of source tarball)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790400">- don't use removed macro %add_to_maven_depmap (#992816)
- lint: trim-lines, reuse %{name} macro, fedora-review fixes
- merge cleanup changes by Stano Ochotnicky</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790401">- add javadoc subpackage</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 9.2.1002-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-6" date="1524225600">- fix incompatibility with 9.6+ (rhbz#1547424)
- it's unnecessary to depend on whole java (rhbz#1406931)</changelog>
</package>
<package pkgid="fa039ba6c0db8c41a86dcde8ccaffff6ef1db70b9935619f6f7e7b6b42eaa3cd" name="postgresql-jdbc-javadoc" arch="noarch">
  <version epoch="0" ver="9.2.1002" rel="6.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.1.901-4" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.1.902-1" date="1342958400">- Update to build 9.1-902</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1001-1" date="1352808000">- Update to build 9.2-1001 for compatibility with PostgreSQL 9.2</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1002-1" date="1352894400">- Update to build 9.2-1002 (just to correct mispackaging of source tarball)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790400">- don't use removed macro %add_to_maven_depmap (#992816)
- lint: trim-lines, reuse %{name} macro, fedora-review fixes
- merge cleanup changes by Stano Ochotnicky</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790401">- add javadoc subpackage</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 9.2.1002-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-6" date="1524225600">- fix incompatibility with 9.6+ (rhbz#1547424)
- it's unnecessary to depend on whole java (rhbz#1406931)</changelog>
</package>
<package pkgid="a7e649a420f741df8e0786cf6a10cce4c5406fef96aa6183d29273d53d809bc5" name="postgresql-jdbc-javadoc" arch="noarch">
  <version epoch="0" ver="9.2.1002" rel="6.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.1.901-4" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.1.902-1" date="1342958400">- Update to build 9.1-902</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1001-1" date="1352808000">- Update to build 9.2-1001 for compatibility with PostgreSQL 9.2</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1002-1" date="1352894400">- Update to build 9.2-1002 (just to correct mispackaging of source tarball)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790400">- don't use removed macro %add_to_maven_depmap (#992816)
- lint: trim-lines, reuse %{name} macro, fedora-review fixes
- merge cleanup changes by Stano Ochotnicky</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790401">- add javadoc subpackage</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 9.2.1002-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-6" date="1524225600">- fix incompatibility with 9.6+ (rhbz#1547424)
- it's unnecessary to depend on whole java (rhbz#1406931)</changelog>
</package>
<package pkgid="2029e1386ecedf4bd4959b88fdd68ad22e08ea2be7a853f4bae89e45014c034c" name="procps-ng" arch="i686">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="df3145a037d9f9ec7d87f859cd4d62e792d3606ca451de27cf7791963519c1dd" name="procps-ng" arch="src">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="17f52d07c01051cc5309862b95a11b325eaec0a4c306d062207f9731d7b43a43" name="procps-ng" arch="src">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="331e741c076a806fc6d8aa111e705c24b4feb07620cd7e36152ccec13fb1ac38" name="procps-ng" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="0ade7a9f7f180c3d7fac587cad277da234649638f7112b0f5cc553e94430b870" name="procps-ng-debuginfo" arch="i686">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="1ec9af26ee0d8192511e85e980de36bf9ef7dc7b628a0b0bead8052090f8faf6" name="procps-ng-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="8c3bf00001fb7febca2226ffe74977f99e1ecfea5f6c5b3370a6dea4acf0d4ce" name="procps-ng-devel" arch="i686">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="563c08d73572771215ca1a22ef18dd53292d4ce51139747e731f70eb2dd0c4e5" name="procps-ng-devel" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="07e0772386d846e9e6c4b5cd700823046493d7acab29fa277eded0a62b34e55d" name="procps-ng-i18n" arch="i686">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="5e1c424ad328e26dfea3f871217c70506c60fcfbbe1fed91c000e828e824a4bd" name="procps-ng-i18n" arch="x86_64">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="e6327c4262f7d85bc1a1fe662574d3dadab250bf99b79fbf4031c418c17d09bd" name="python" arch="i686">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="61367bdd188a0686c5836d5fab361b7af1862416ca8014693c848f433eb8821c" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="80932b33bc583ca019478936f78580ba0ea73d36c8a37a31130afba71186d2fb" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="11011686e4490561e71119202f59ca22ea6fafac12783f651bf1b1739c864a32" name="python" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="5b864b3e87297b638bbb017993894daba670aaa609183d111f099d5e0c232ea5" name="python-boto3" arch="noarch">
  <version epoch="0" ver="1.4.6" rel="4.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.4.1-1" date="1476100800">- Update to 1.4.1</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.2-1" date="1480766400">- Update to 1.4.2</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4.2-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.3-1" date="1482926400">- Update to 1.4.3</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.4-1" date="1484913600">- Update to 1.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.6-2" date="1502625600">- Update to 1.4.6</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4" date="1518436800">- Append python-botocore and python-jmespath bundled directories to
  search path where needed

  Resolves: rhbz#1509439</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4.1" date="1527163200">- Fix missing "import sys" in s3/transfer.py

  Resolves: rhbz#1581764</changelog>
</package>
<package pkgid="c18d38a0b2fe1b589935fb43680e936b494268d1cce5f3ec5df85e234caf00b5" name="python-boto3" arch="noarch">
  <version epoch="0" ver="1.4.6" rel="4.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.4.1-1" date="1476100800">- Update to 1.4.1</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.2-1" date="1480766400">- Update to 1.4.2</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4.2-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.3-1" date="1482926400">- Update to 1.4.3</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.4-1" date="1484913600">- Update to 1.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.6-2" date="1502625600">- Update to 1.4.6</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4" date="1518436800">- Append python-botocore and python-jmespath bundled directories to
  search path where needed

  Resolves: rhbz#1509439</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4.1" date="1527163200">- Fix missing "import sys" in s3/transfer.py

  Resolves: rhbz#1581764</changelog>
</package>
<package pkgid="c83577d53fe503dff77dee6e6cfda29586d9f9bf04e610585c965efaf0124bdc" name="python-boto3" arch="src">
  <version epoch="0" ver="1.4.6" rel="4.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.4.1-1" date="1476100800">- Update to 1.4.1</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.2-1" date="1480766400">- Update to 1.4.2</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4.2-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.3-1" date="1482926400">- Update to 1.4.3</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.4-1" date="1484913600">- Update to 1.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.6-2" date="1502625600">- Update to 1.4.6</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4" date="1518436800">- Append python-botocore and python-jmespath bundled directories to
  search path where needed

  Resolves: rhbz#1509439</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4.1" date="1527163200">- Fix missing "import sys" in s3/transfer.py

  Resolves: rhbz#1581764</changelog>
</package>
<package pkgid="cc7b8967acd9136a4c8beea5f2857b24f42b7157f8e6042ed70c2e10e7568072" name="python-boto3" arch="src">
  <version epoch="0" ver="1.4.6" rel="4.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.4.1-1" date="1476100800">- Update to 1.4.1</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.2-1" date="1480766400">- Update to 1.4.2</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4.2-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.3-1" date="1482926400">- Update to 1.4.3</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.4-1" date="1484913600">- Update to 1.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.6-2" date="1502625600">- Update to 1.4.6</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4" date="1518436800">- Append python-botocore and python-jmespath bundled directories to
  search path where needed

  Resolves: rhbz#1509439</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4.1" date="1527163200">- Fix missing "import sys" in s3/transfer.py

  Resolves: rhbz#1581764</changelog>
</package>
<package pkgid="0f3ac87d37ea39f34d6de7b2f801642cbd8ac21e81f59a0df6949135b571c443" name="python-configshell" arch="noarch">
  <version epoch="1" ver="1.1.fb23" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb9-1" date="1378987200">- New upstream release
- Remove dependency on python-simpleparse in favor of pyparsing
- Remove BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.1.fb9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-1" date="1389009600">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-3" date="1390824000">- Update source/URL to current
- Fix changelog</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb14-1" date="1411560000">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb18-1" date="1436961600">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-1" date="1488456000">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-2" date="1495540800">- Add configshell-fix-term.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-3" date="1496145600">- Rename configshell-fix-term.patch to 0001*
- Add 0002-Fix-path-regex-for-and.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1:1.1.fb23-4" date="1522324800">- Fix failure when parsing parameters
- Add 0003-Fix-failing-to-pasre-par-val-parameters.patch
- Add 0004-Fix-failing-to-pasre-param-like-cfgstr-par-val.patch</changelog>
</package>
<package pkgid="eb45266bfb28eb00cd3b5c48697aca2ded02dad2cc579e77eb922709921dbea2" name="python-configshell" arch="noarch">
  <version epoch="1" ver="1.1.fb23" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb9-1" date="1378987200">- New upstream release
- Remove dependency on python-simpleparse in favor of pyparsing
- Remove BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.1.fb9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-1" date="1389009600">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-3" date="1390824000">- Update source/URL to current
- Fix changelog</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb14-1" date="1411560000">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb18-1" date="1436961600">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-1" date="1488456000">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-2" date="1495540800">- Add configshell-fix-term.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-3" date="1496145600">- Rename configshell-fix-term.patch to 0001*
- Add 0002-Fix-path-regex-for-and.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1:1.1.fb23-4" date="1522324800">- Fix failure when parsing parameters
- Add 0003-Fix-failing-to-pasre-par-val-parameters.patch
- Add 0004-Fix-failing-to-pasre-param-like-cfgstr-par-val.patch</changelog>
</package>
<package pkgid="0ae181aa21c83df20c81661f14dd90bcb26a1f7ab56b02aff5a3e4f24af46ea2" name="python-configshell" arch="src">
  <version epoch="1" ver="1.1.fb23" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb9-1" date="1378987200">- New upstream release
- Remove dependency on python-simpleparse in favor of pyparsing
- Remove BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.1.fb9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-1" date="1389009600">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-3" date="1390824000">- Update source/URL to current
- Fix changelog</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb14-1" date="1411560000">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb18-1" date="1436961600">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-1" date="1488456000">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-2" date="1495540800">- Add configshell-fix-term.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-3" date="1496145600">- Rename configshell-fix-term.patch to 0001*
- Add 0002-Fix-path-regex-for-and.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1:1.1.fb23-4" date="1522324800">- Fix failure when parsing parameters
- Add 0003-Fix-failing-to-pasre-par-val-parameters.patch
- Add 0004-Fix-failing-to-pasre-param-like-cfgstr-par-val.patch</changelog>
</package>
<package pkgid="62505f7a03328e79e2bc3dc1bbb7c161f8907cd83c52dd34f421351c16da1a70" name="python-configshell" arch="src">
  <version epoch="1" ver="1.1.fb23" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb9-1" date="1378987200">- New upstream release
- Remove dependency on python-simpleparse in favor of pyparsing
- Remove BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.1.fb9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-1" date="1389009600">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-3" date="1390824000">- Update source/URL to current
- Fix changelog</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb14-1" date="1411560000">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb18-1" date="1436961600">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-1" date="1488456000">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-2" date="1495540800">- Add configshell-fix-term.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-3" date="1496145600">- Rename configshell-fix-term.patch to 0001*
- Add 0002-Fix-path-regex-for-and.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1:1.1.fb23-4" date="1522324800">- Fix failure when parsing parameters
- Add 0003-Fix-failing-to-pasre-par-val-parameters.patch
- Add 0004-Fix-failing-to-pasre-param-like-cfgstr-par-val.patch</changelog>
</package>
<package pkgid="b15918dcd6990f4e9e219521b067a91ce71600967c86775a9864fe17fe9b38ea" name="python-debug" arch="i686">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="0c1814d56ca168bea78ba9e4fdb5ee3e64e5693b02cb3c37030dee93063ffdb7" name="python-debug" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="a575c1fb281f64a549dd6fd291a593dbc0146fc8c2c0a319ddf57a7e16ee514a" name="python-debuginfo" arch="i686">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="fcb725502062ddcc9e2ebd148c84ca6e53ba29ab86965c9ac299dfb14247d275" name="python-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="c3ddce4a1a2cb06fab1bfd60f3e5bba755aeef8bbe2ac74f88cf1fc516acb2e8" name="python-devel" arch="i686">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="25719ef5664ce077f1e8aec9fb0295432cef914480f1038673408b1d0167f2c4" name="python-devel" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="9006b319954ef3e46d57ee4ada75fe1b4a5fb46f46448d71a2cdcfdb654d62fb" name="python-gluster" arch="noarch">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="e65400e880aceb1be0996f0f61e74c90447fd8a84d765603540de9977d9be74a" name="python-gluster" arch="noarch">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="3c32783e2692ef211569d353d0a91c37e21ee2a836c00f556d69f2ef1a6050bd" name="python-lesscpy" arch="noarch">
  <version epoch="0" ver="0.9j" rel="4.el7.centos"/>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-1" date="1375099200">- Initial package.</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-2" date="1377086400">- add br python-ply</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-3" date="1377777600">- use python instead of python3 in python2 package</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-4" date="1390996800">- epel7 has no python3</changelog>
</package>
<package pkgid="433030e95cdf46fb3b12e4eb72ee644f4817b46e06d8dcf6352d4dca7680cee2" name="python-lesscpy" arch="src">
  <version epoch="0" ver="0.9j" rel="4.el7.centos"/>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-1" date="1375099200">- Initial package.</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-2" date="1377086400">- add br python-ply</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-3" date="1377777600">- use python instead of python3 in python2 package</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-4" date="1390996800">- epel7 has no python3</changelog>
</package>
<package pkgid="53c968db41f7ef163d65ef530d5e2736d078e70b51a3270cd1f8d42017473987" name="python-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="94af2130961863907908613c2f1b5f7d04a1100618bb73f44454639293806c60" name="python-libipa_hbac" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="944d15c5062e94b8113e936971eb87ced049bb04bb08db34fb86c3a431e59edc" name="python-libipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="1fd1bf57a88d89ab28f47e1f26f261ce3787320fed0f344d717fbc9c02cf79ff" name="python-libs" arch="i686">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="c6e74e9c0710bbab43553d96de1d41aad83d97dc9b8582caf10b75ec140f647d" name="python-libs" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="e7a9dcc3fc0365238a748d9d3d1e546d3627468b5fa83a736a6ebe57188b62f8" name="python-libsss_nss_idmap" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="e1974f1b2d687c707c2154f8401707a322bacbf9440f8a0f06af301b7617e904" name="python-libsss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="52ef736fe0bb42ed6f3bba82aab011dfe159b7400108d6f166932eb1267dbe4d" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="1d7f4731fc030a40589a0d6ba149602f9e5169e78ecd625720f897db25b9ced2" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="89febb6ef9aba23b4c6706da2907b16dea2d24d4090bf019a02166d8071d8743" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="88cea2aa862293de1a6b153f4b0c133fe65f30070698a5a28d86a9fb9b602c1c" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="d4bd21bae762de38b56949d604342ce5aeb5f366920f343bd4c7ba32beda3a4f" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="59153530e1192b947455516aa9f6928dd5aaf532d17a9480722dde55bb22f024" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="6d3d10475577961fce9c55bfb5b78f4f9a384785f57462989999af801ebd5430" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="25d111be195b962fef781119c2b66ec4c4654be8347aed9efcbde251f88b7135" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="3f8005522f34f573cfb71273c1ef47d2e923e912679b620cfe5e281a8a6562c0" name="python-perf" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="4cc7a07a57678bf48296eda03361186679b5b9b8016edcb006b622729251f56d" name="python-perf" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="5fcf2e4721d109f9e3a86c355986a9f6949ea20e143d46b93abd1e90958c080a" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.11.6.el7.centos.plus]" date="1534248000">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]
- Apply a patch to fix mempolicy issue [bug#15115]</changelog>
</package>
<package pkgid="9e1bb41955c6464aced924dcf30fe0781775ae8faa9787484283a6177d1fe0b1" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="5830be201dbd71edac9b608e7df83f453c0baf828ec0da29ce2d56d4246fcf92" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.2.3.centos.plus]" date="1525780800">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]</changelog>
</package>
<package pkgid="25b61a0ba1f1db11639c19a4d7b20d640f0ea4081545eaeb360108fad19cd348" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.3.3.centos.plus]" date="1528977600">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix iotop error [bug14864]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="1a040453c518eaeed1c705b45dc7815bd483b47a952b677f5708d3fdc7829e5d" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="0214d0518407b71a3dfd8d3a74f440a3f1c11cbdc9bfbf3ea1f20d0bec5eb35a" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7.centos.plus"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.6.3.centos.plus]" date="1530014400">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix fsnotify [bug14823]
- Added a patch to fix alsa potentail crash [bug14779</changelog>
</package>
<package pkgid="d6affaadb0e66b07d95e68f690c2251c28f8d76fd011e797eac60c69d41341d0" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="edb5c855ac3d08699ad3195ed1747a4c9d78602c02f1651c3fac186c37732260" name="python-perf-debuginfo" arch="i686">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7.centos.plus"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
  <changelog author="Akemi Yagi &lt;toracat@centos.org&gt; [3.10.0-862.9.1.centos.plus]" date="1531742401">- Apply debranding changes
- Roll in i686 mods
   addmissing.patch  [puias]
   cpufreq.patch  [puias]
   i386-audit-stop-scri-stack-frame.patch  [puias]
   removejiffies.patch  [puias]
   undorhirqstat.patch  [puias]
   morefixes.patch      [puias+bug#12412]
   upstream-32bit-fixes-7_5.patch [puias+bug#12412]
   clear-32bit-Werror-warnings.patch  [bug#12412]
   qspinlock_types-32bit.patch   [ay]
   i686-7-4.patch [T.Kabe, bug#13890]
   firmware-efi-32bit.patch [ay]
   patch-spec_ctrl_i686.patch [T.Kabe bug#14353]
   686 mods for 7.5 [T.Kabe bug#14703]
   more 686 mods for 7.5 (-862.3.2) [pgreco]
- Modify config file for x86_64 with extra features turned on including
  some network adapters, BusLogic, ReiserFS, TOMOYO
- Add in a patch that allows non-LogiTech remote to work [bug#5780]
- JFS enabled [bug#7350]
- NUMACHIP enabled [bug#7498]
- AIC7xxx enabled [bug#7552]
- Enabled via_velocity [bug#7877]
- Add in a patch that fixes em28xx-cards [bug#8285]
- Enabled ECRYPT_FS with a patch to fix build error [bug#7369]
- Enabled Keyboard GPIO [bug#9063]
- Enabled XEN_FBDEV_FRONTEND [bug#9463]
- Enabled LINE6_USB [bug#9569]
- Enabled I2C_MUX [bug#9592]
- Enabled spidev [bug#9955]
- Add a patch [bug#10447]
- Enable ATM drivers [bug#10845]
- Add 9pfs config options [bug#10849]
- Enable VFIO_PCI_VGA [bug#12435]
- Rremove initramfs-xxxkdump.img upon kernel removal [bug#12703]
- Add a patch from [bug#12841]
- Add a patch from [bug#12818]
- Enabled RT2800USB_RT3573 [bug#13162]
- Enable LDM_PARTITION [bug#13526]
- Add a patch to fix misleading warning [bug#13990]
- Add BuildRequires: openssl-devel to the with_perf section [bug#13990]
- Add a patch to fix build errors for EL7.5 [bug#14425]
- Added a patch to fix alsa potentail crash [bug14779]
- Apply a patch to fix excessive warnings [bug#14413]</changelog>
</package>
<package pkgid="236fc69ba2a7813a11a6dc3417b1566b5b1ee5a8356036175cb66ee8e7501d48" name="python-perf-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="0f960c72269365943459d8fc5b85eadaa98e812594c09d959c3047d401067007" name="python-rtslib" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="11.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb63-2" date="1495022400">- Add patch 0003 to fix #1440172</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
</package>
<package pkgid="2d35d5364e9341d5f246b03ad1696162ba71f1c751b7a21d133bffa93ba7bdc8" name="python-rtslib" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="11.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb63-2" date="1495022400">- Add patch 0003 to fix #1440172</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
</package>
<package pkgid="03b33f2fc116bfec248a111c4ffcabc61515d27b823426d8a6197e17f59b9a4a" name="python-rtslib" arch="src">
  <version epoch="0" ver="2.1.fb63" rel="11.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb63-2" date="1495022400">- Add patch 0003 to fix #1440172</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
</package>
<package pkgid="739eef68f52fad2385f4eaf83a42ad918bbd011422807ac6874c4e8f558e8a63" name="python-rtslib" arch="src">
  <version epoch="0" ver="2.1.fb63" rel="11.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb63-2" date="1495022400">- Add patch 0003 to fix #1440172</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
</package>
<package pkgid="c18176e4c9589157eaf2e4aa8c1ee249e1c0435640389ae5d295de42364ec116" name="python-rtslib" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="12.el7_5"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
</package>
<package pkgid="f854feab0491ae5f1d539f746d4a0873ab37a7b8baaf835d8c02ee9c56c42008" name="python-rtslib" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="12.el7_5"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
</package>
<package pkgid="f3880f3830f930a2ad3d8f58fe57aff20b376332cdd538aa661b9ca85587821f" name="python-rtslib" arch="src">
  <version epoch="0" ver="2.1.fb63" rel="12.el7_5"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
</package>
<package pkgid="e1617a9fb2f632a759a8974182b9b4102f43ae422aeaa77feff24b92f04e6a51" name="python-rtslib" arch="src">
  <version epoch="0" ver="2.1.fb63" rel="12.el7_5"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
</package>
<package pkgid="71f3ef0630fb3caa6a4f2abedadd2a7f0f518ba73bbc101dd6ba4ca888e8d391" name="python-rtslib-doc" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="11.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb63-2" date="1495022400">- Add patch 0003 to fix #1440172</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
</package>
<package pkgid="0667c62749c350220d66171e7871b67a64768686dc73dd87cd3a7a0c59744ad9" name="python-rtslib-doc" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="11.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb63-2" date="1495022400">- Add patch 0003 to fix #1440172</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
</package>
<package pkgid="e3d3ab455fd77f53c013ec1a29406bf210339c30f642f96cf309378f729daffb" name="python-rtslib-doc" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="12.el7_5"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
</package>
<package pkgid="5c1e10b234c2151f31a7aadfe104f77d7d54f43d2e8743296bc1a4a198f935bb" name="python-rtslib-doc" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="12.el7_5"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
</package>
<package pkgid="016e610fe6a5e43659af57c7f896601a9142a988212fd38e29bf2d8774cfe901" name="python-sss" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="3ce6ed833c825f2c96b4ae9451356e4fe0b3afb9f41841688da73393beb0c173" name="python-sss" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="d155643a085c3b930538dfaa309c240f557265ce9aa800f7ada8919d923bc9b8" name="python-sss-murmur" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="4b85e02d4bffdef46988763b3aa7a02854fcf93d76f6dec8860066b1f0c039be" name="python-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="d447ad56127af2d63e4b2c55f4b9cb76cda189c7572ab2c9a04b6b6de3dcc1d9" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="cb097cc053a89e9e4c6d524a466555fac26b47193550bed74fd7aa912b891073" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="f813f2641bb8493b084bd8415b4a9d78ef5a208e6dd44ba9121a4bd118ccfb98" name="python-test" arch="i686">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="8e1b1d9c2ba1dec2190638f1b299d2ba97702b784056b45823f5c657cd1c1e6e" name="python-test" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="f557cbb9e5f6ab344ac7bee0c69405232b36995767bb47a8c6c66905732b2d94" name="python-tools" arch="i686">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="2a45ad2f42dd50a031a332125210aa5ade1a157aa4eb9e97f72a5666ab83063b" name="python-tools" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="2f3121de0dc1476aa14f05bc4b9957bd7157c632f1438b153e7c11ee9d327a04" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ebc4a701f0dcdc13424f4233a5096e3895c03263832d254f496558a430d1de7d" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="baa9342cf57ac588357bb3cb08e11e3ab72f498de808f35073a65a088adc0825" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9fbb714ed1203169653125d82a5bfe0add33a99ab9d6910bd6d1458ffc4411a4" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="a783410c9c8febd8ecca5ccccb3d13a560f6ab865966342374ff7fdf6d28aa64" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="fee5f075593452ca61fc53ed0c4af8eea72c9349a248899a7676d101be55dbc2" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c8ac3efcde32c9b7177ce06992f7d46c8d9f318640bde68c4b949a39224c97ae" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="650710107a1f0ea857cc88325b0139f257401905341e8d49aeab087736a620da" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="cb20b2f1cec41ceefb121408764d83ac462f42431a9ee9ed0ce169f0590ccadc" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d0653484a9053f578ed1fde792d51fb0747b6095ba607d24227221f6430dd2f9" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f2730e4992cf0531ee85bc4365980fad44cb1dcb8b1356c8850dbeafb0107c6b" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="78f6f0bed2d9bff9b8bcdd12ce629b22041a530c7b958f932f86126162d6f19a" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8d738bd2a0bcc0517bb532e615def6e2f55c5bb759bb16a4cf09e7a6d09ac966" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-148.el7" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501121]
- kvm-qemu-option-reject-empty-number-value.patch [bz#1417864]
- Resolves: bz#1417864
  (Qemu-kvm starts with unspecified port)
- Resolves: bz#1501121
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="943b80f7b474b65fa18b4d541a1d8c63176246a580a73863c875620b645a04b7" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
</package>
<package pkgid="724da8f61db55a4840f83a644f2f2b0ad4532abcd9f217b738a052119557ed02" name="qemu-img" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.3" date="1528459200">- kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584363]
- kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584363]
- Resolves: bz#1584363
  (CVE-2018-3639 qemu-kvm: hw: cpu: AMD: speculative store bypass [rhel-7.5.z])</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt; - 1.5.3-156.el7_5.3" date="1530100800">- Added kvm_target arm (Jacco@redsleeve.org)</changelog>
</package>
<package pkgid="ab6be8de36ecdfdf424f1eabfd2989cb2a73a330f320cddc4a9753e2897926d4" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-148.el7" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501121]
- kvm-qemu-option-reject-empty-number-value.patch [bz#1417864]
- Resolves: bz#1417864
  (Qemu-kvm starts with unspecified port)
- Resolves: bz#1501121
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="3932b0b64800bd189315482024709f091ac100dbaca62df0e1196169ba85dceb" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-148.el7" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501121]
- kvm-qemu-option-reject-empty-number-value.patch [bz#1417864]
- Resolves: bz#1417864
  (Qemu-kvm starts with unspecified port)
- Resolves: bz#1501121
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="28e60fd9eb4b4637c6ed2abb5be425fd4766048be4babdb2100bd29a032f933d" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
</package>
<package pkgid="8a393c7fc33f152e438f1047e3395c7cbb322feae719845b3f8b8a9cca9ca929" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
</package>
<package pkgid="dbaf40d75afa0d854dbd18dbf557260f5a6fd9244b6564ac735f1940e65ee87a" name="qemu-kvm" arch="src">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.3" date="1528459200">- kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584363]
- kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584363]
- Resolves: bz#1584363
  (CVE-2018-3639 qemu-kvm: hw: cpu: AMD: speculative store bypass [rhel-7.5.z])</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt; - 1.5.3-156.el7_5.3" date="1530100800">- Added kvm_target arm (Jacco@redsleeve.org)</changelog>
</package>
<package pkgid="d9288a5873a3b61a4122addbcc29bfeb37e4abd6bbc820721f11e4b3ff4357b2" name="qemu-kvm" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.3" date="1528459200">- kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584363]
- kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584363]
- Resolves: bz#1584363
  (CVE-2018-3639 qemu-kvm: hw: cpu: AMD: speculative store bypass [rhel-7.5.z])</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt; - 1.5.3-156.el7_5.3" date="1530100800">- Added kvm_target arm (Jacco@redsleeve.org)</changelog>
</package>
<package pkgid="651be4d5cb457f2f2ee7f6f4e724ef6c249f8ae579aac1f2509c2df0ae951a8e" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-148.el7" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501121]
- kvm-qemu-option-reject-empty-number-value.patch [bz#1417864]
- Resolves: bz#1417864
  (Qemu-kvm starts with unspecified port)
- Resolves: bz#1501121
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="977d79fb6f0962823a0a1c9f71ba03d03a6b626f55ff2a64e65205941bb60281" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
</package>
<package pkgid="387af08bd61daea77bcd11f6f3aa4fabecbbe14cba3a3edfea8334c1a812fa57" name="qemu-kvm-common" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.3" date="1528459200">- kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584363]
- kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584363]
- Resolves: bz#1584363
  (CVE-2018-3639 qemu-kvm: hw: cpu: AMD: speculative store bypass [rhel-7.5.z])</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt; - 1.5.3-156.el7_5.3" date="1530100800">- Added kvm_target arm (Jacco@redsleeve.org)</changelog>
</package>
<package pkgid="b0cb7926d3bb8461aa39f75b2aa0a3c4ea6422458799f814e0ee681e900d8736" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-148.el7" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501121]
- kvm-qemu-option-reject-empty-number-value.patch [bz#1417864]
- Resolves: bz#1417864
  (Qemu-kvm starts with unspecified port)
- Resolves: bz#1501121
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="f232ce52f4e881a86097c37e1330cd80259589a3ed0df2f1a08730a97efd6042" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
</package>
<package pkgid="429b4062db824d8427f04f18ea97a19e4aef5c32c93d9ef795065edaaa353f1d" name="qemu-kvm-debuginfo" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.3" date="1528459200">- kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584363]
- kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584363]
- Resolves: bz#1584363
  (CVE-2018-3639 qemu-kvm: hw: cpu: AMD: speculative store bypass [rhel-7.5.z])</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt; - 1.5.3-156.el7_5.3" date="1530100800">- Added kvm_target arm (Jacco@redsleeve.org)</changelog>
</package>
<package pkgid="94c8f3bafc1b4344d011480e9316a1e2f052c8f930482f525c393ddb3afc3cdc" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-148.el7" date="1510315200">- kvm-multiboot-validate-multiboot-header-address-values.patch [bz#1501121]
- kvm-qemu-option-reject-empty-number-value.patch [bz#1417864]
- Resolves: bz#1417864
  (Qemu-kvm starts with unspecified port)
- Resolves: bz#1501121
  (CVE-2017-14167 qemu-kvm: Qemu: i386: multiboot OOB access while loading kernel image [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="0e04d097c0efd1b1db28e77326f4fc0285e229b6c370246c1f5fc78749da71c5" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-149.el7" date="1511956800">- kvm-block-linux-aio-fix-memory-and-fd-leak.patch [bz#1491434]
- kvm-linux-aio-Fix-laio-resource-leak.patch [bz#1491434]
- kvm-slirp-cleanup-leftovers-from-misc.h.patch [bz#1508745]
- kvm-Avoid-embedding-struct-mbuf-in-other-structures.patch [bz#1508745]
- kvm-slirp-Fix-access-to-freed-memory.patch [bz#1508745]
- kvm-slirp-fix-clearing-ifq_so-from-pending-packets.patch [bz#1508745]
- kvm-qcow2-Prevent-backing-file-names-longer-than-1023.patch [bz#1459714]
- kvm-qemu-img-Use-strerror-for-generic-resize-error.patch [bz#1459725]
- kvm-qcow2-Avoid-making-the-L1-table-too-big.patch [bz#1459725]
- Resolves: bz#1459714
  (Throw error if qemu-img rebasing backing file is too long or provide way to fix a "too long" backing file.)
- Resolves: bz#1459725
  (Prevent qemu-img resize from causing "Active L1 table too large")
- Resolves: bz#1491434
  (KVM leaks file descriptors when attaching and detaching virtio-scsi block devices)
- Resolves: bz#1508745
  (CVE-2017-13711 qemu-kvm: Qemu: Slirp: use-after-free when sending response [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-150.el7" date="1513080000">- kvm-Build-only-x86_64-packages.patch [bz#1520793]
- Resolves: bz#1520793
  (Do not build non-x86_64 subpackages)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
</package>
<package pkgid="1f32b815d8915ee1b6a7df67e51d1cda5af882040047c5dfefe46107b0549f27" name="qemu-kvm-tools" arch="x86_64">
  <version epoch="10" ver="1.5.3" rel="156.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-151.el7" date="1513684800">- kvm-fw_cfg-remove-support-for-guest-side-data-writes.patch [bz#1411490]
- kvm-fw_cfg-prevent-selector-key-conflict.patch [bz#1411490]
- kvm-fw_cfg-prohibit-insertion-of-duplicate-fw_cfg-file-n.patch [bz#1411490]
- kvm-fw_cfg-factor-out-initialization-of-FW_CFG_ID-rev.-n.patch [bz#1411490]
- kvm-Implement-fw_cfg-DMA-interface.patch [bz#1411490]
- kvm-fw_cfg-avoid-calculating-invalid-current-entry-point.patch [bz#1411490]
- kvm-fw-cfg-support-writeable-blobs.patch [bz#1411490]
- kvm-Enable-fw_cfg-DMA-interface-for-x86.patch [bz#1411490]
- kvm-fw_cfg-unbreak-migration-compatibility.patch [bz#1411490]
- kvm-i386-expose-fw_cfg-QEMU0002-in-SSDT.patch [bz#1411490]
- kvm-fw_cfg-add-write-callback.patch [bz#1411490]
- kvm-hw-misc-add-vmcoreinfo-device.patch [bz#1411490]
- kvm-vmcoreinfo-put-it-in-the-misc-device-category.patch [bz#1411490]
- kvm-fw_cfg-enable-DMA-if-device-vmcoreinfo.patch [bz#1411490]
- kvm-build-sys-restrict-vmcoreinfo-to-fw_cfg-dma-capable-.patch [bz#1411490]
- kvm-dump-Make-DumpState-and-endian-conversion-routines-a.patch [bz#1411490]
- kvm-dump.c-Fix-memory-leak-issue-in-cleanup-processing-f.patch [bz#1411490]
- kvm-dump-Propagate-errors-into-qmp_dump_guest_memory.patch [bz#1411490]
- kvm-dump-Turn-some-functions-to-void-to-make-code-cleane.patch [bz#1411490]
- kvm-dump-Fix-dump-guest-memory-termination-and-use-after.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-page-size.patch [bz#1411490]
- kvm-dump-allow-target-to-set-the-physical-base.patch [bz#1411490]
- kvm-dump-guest-memory-cleanup-removing-dump_-error-clean.patch [bz#1411490]
- kvm-dump-guest-memory-using-static-DumpState-add-DumpSta.patch [bz#1411490]
- kvm-dump-guest-memory-add-dump_in_progress-helper-functi.patch [bz#1411490]
- kvm-dump-guest-memory-introduce-dump_process-helper-func.patch [bz#1411490]
- kvm-dump-guest-memory-disable-dump-when-in-INMIGRATE-sta.patch [bz#1411490]
- kvm-DumpState-adding-total_size-and-written_size-fields.patch [bz#1411490]
- kvm-dump-do-not-dump-non-existent-guest-memory.patch [bz#1411490]
- kvm-dump-add-guest-ELF-note.patch [bz#1411490]
- kvm-dump-update-phys_base-header-field-based-on-VMCOREIN.patch [bz#1411490]
- kvm-kdump-set-vmcoreinfo-location.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Move-constants-to-the-t.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Make-methods-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Improve-python-3-compat.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Cleanup-functions.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-Introduce-multi-arch-su.patch [bz#1411490]
- kvm-Fix-typo-in-variable-name-found-and-fixed-by-codespe.patch [bz#1411490]
- kvm-scripts-dump-guest-memory.py-add-vmcoreinfo.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-No-symbol-vmcoreinfo_find.patch [bz#1411490]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1411490]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-152.el7" date="1515067200">- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-153.el7" date="1515758400">- kvm-i386-update-ssdt-misc.hex.generated.patch [bz#1411490]
- kvm-main-loop-Acquire-main_context-lock-around-os_host_m.patch [bz#1435432 bz#1473536]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1435432
  (Emulated ISA serial port hangs randomly when sending lots of data from guest -&gt; host)
- Resolves: bz#1473536
  (Hangs in serial console under qemu)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-154.el7" date="1516795200">- kvm-virtio-net-validate-backend-queue-numbers-against-bu.patch [bz#1460872]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1411490]
- kvm-qxl-add-migration-blocker-to-avoid-pre-save-assert.patch [bz#1536883]
- Resolves: bz#1411490
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm))
- Resolves: bz#1460872
  (Aborted(core dumped) when booting guest with "-netdev tap....vhost=on,queues=32")
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-155.el7" date="1517313600">- kvm-qdev-Fix-assert-in-PCI-address-property-when-used-by.patch [bz#1538866]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534691]
- kvm-savevm-Improve-error-message-for-blocked-migration.patch [bz#1536883]
- kvm-savevm-fail-if-migration-blockers-are-present.patch [bz#1536883]
- Resolves: bz#1534691
  (CVE-2018-5683 qemu-kvm: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1536883
  ([abrt] [faf] qemu-kvm: unknown function(): /usr/libexec/qemu-kvm killed by 6)
- Resolves: bz#1538866
  (qemu will coredump after executing info qtree)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7" date="1519128000">- kvm-vnc-Fix-qemu-crashed-when-vnc-client-disconnect-sudd.patch [bz#1527405]
- kvm-fix-full-frame-updates-for-VNC-clients.patch [bz#1527405]
- kvm-vnc-update-fix.patch [bz#1527405]
- kvm-vnc-return-directly-if-no-vnc-client-connected.patch [bz#1527405]
- kvm-buffer-add-buffer_move_empty.patch [bz#1527405]
- kvm-buffer-add-buffer_move.patch [bz#1527405]
- kvm-vnc-kill-jobs-queue-buffer.patch [bz#1527405]
- kvm-vnc-jobs-move-buffer-reset-use-new-buffer-move.patch [bz#1527405]
- kvm-vnc-zap-dead-code.patch [bz#1527405]
- kvm-vnc-add-vnc_width-vnc_height-helpers.patch [bz#1527405]
- kvm-vnc-factor-out-vnc_update_server_surface.patch [bz#1527405]
- kvm-vnc-use-vnc_-width-height-in-vnc_set_area_dirty.patch [bz#1527405]
- kvm-vnc-only-alloc-server-surface-with-clients-connected.patch [bz#1527405]
- kvm-ui-fix-refresh-of-VNC-server-surface.patch [bz#1527405]
- kvm-ui-move-disconnecting-check-to-start-of-vnc_update_c.patch [bz#1527405]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527405]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527405]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527405]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527405]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527405]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527405]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527405]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527405]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527405]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527405]
- kvm-io-skip-updates-to-client-if-websocket-output-buffer.patch [bz#1518711]
- Resolves: bz#1518711
  (CVE-2017-15268 qemu-kvm: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1527405
  (CVE-2017-15124 qemu-kvm: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.1" date="1523880000">- kvm-vga-add-ram_addr_t-cast.patch [bz#1567913]
- kvm-vga-fix-region-calculation.patch [bz#1567913]
- Resolves: bz#1567913
  (CVE-2018-7858 qemu-kvm: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.2" date="1526040000">- kvm-i386-define-the-ssbd-CPUID-feature-bit-CVE-2018-3639.patch [bz#1574075]
- Resolves: bz#1574075
  (EMBARGOED CVE-2018-3639 qemu-kvm: Kernel: omega-4 [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 1.5.3-156.el7_5.3" date="1528459200">- kvm-i386-Define-the-Virt-SSBD-MSR-and-handling-of-it-CVE.patch [bz#1584363]
- kvm-i386-define-the-AMD-virt-ssbd-CPUID-feature-bit-CVE-.patch [bz#1584363]
- Resolves: bz#1584363
  (CVE-2018-3639 qemu-kvm: hw: cpu: AMD: speculative store bypass [rhel-7.5.z])</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt; - 1.5.3-156.el7_5.3" date="1530100800">- Added kvm_target arm (Jacco@redsleeve.org)</changelog>
</package>
<package pkgid="daf835f1b81bb9b02b1b22a58f05b5d1690cc46a9a14f58f2487c70992b086f7" name="radvd" arch="i686">
  <version epoch="0" ver="1.9.2" rel="9.el7_5.4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.2-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-4" date="1386676800">- Resolves: #948863 - man page scan results for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-6" date="1388664000">- Resolves: #1045179 - use -fno-strict-aliasing for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-8" date="1429185600">- Resolves: #1180991 - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-9" date="1439812800">- Related: #1180991 - rebuilt</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.2" date="1521720000">- Resolves: #1564391 - Write pid file in nodaemon mode
- Fix coverity warnings</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.3" date="1523448000">- Related: 1564391 - Backport file locking and pidfile removal</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.4" date="1523534400">- Check pid file before running main flow
- Enable -Werror=all flag</changelog>
</package>
<package pkgid="2ec064dc2deca883a2f30c0ef9ac97916999dca3dbe8efc888f9b5d527bb4ae3" name="radvd" arch="src">
  <version epoch="0" ver="1.9.2" rel="9.el7_5.4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.2-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-4" date="1386676800">- Resolves: #948863 - man page scan results for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-6" date="1388664000">- Resolves: #1045179 - use -fno-strict-aliasing for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-8" date="1429185600">- Resolves: #1180991 - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-9" date="1439812800">- Related: #1180991 - rebuilt</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.2" date="1521720000">- Resolves: #1564391 - Write pid file in nodaemon mode
- Fix coverity warnings</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.3" date="1523448000">- Related: 1564391 - Backport file locking and pidfile removal</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.4" date="1523534400">- Check pid file before running main flow
- Enable -Werror=all flag</changelog>
</package>
<package pkgid="4be67109d0015a2f22b9a4841176d19479ca5b48c7fe0a045cbeb39e4911e2bf" name="radvd" arch="src">
  <version epoch="0" ver="1.9.2" rel="9.el7_5.4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.2-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-4" date="1386676800">- Resolves: #948863 - man page scan results for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-6" date="1388664000">- Resolves: #1045179 - use -fno-strict-aliasing for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-8" date="1429185600">- Resolves: #1180991 - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-9" date="1439812800">- Related: #1180991 - rebuilt</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.2" date="1521720000">- Resolves: #1564391 - Write pid file in nodaemon mode
- Fix coverity warnings</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.3" date="1523448000">- Related: 1564391 - Backport file locking and pidfile removal</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.4" date="1523534400">- Check pid file before running main flow
- Enable -Werror=all flag</changelog>
</package>
<package pkgid="8284ec4adbfd93f97b8c45aaba3dab552ec04cad2feb53a314ac463b09a6616a" name="radvd" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="9.el7_5.4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.2-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-4" date="1386676800">- Resolves: #948863 - man page scan results for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-6" date="1388664000">- Resolves: #1045179 - use -fno-strict-aliasing for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-8" date="1429185600">- Resolves: #1180991 - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-9" date="1439812800">- Related: #1180991 - rebuilt</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.2" date="1521720000">- Resolves: #1564391 - Write pid file in nodaemon mode
- Fix coverity warnings</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.3" date="1523448000">- Related: 1564391 - Backport file locking and pidfile removal</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.4" date="1523534400">- Check pid file before running main flow
- Enable -Werror=all flag</changelog>
</package>
<package pkgid="e0f1d7d72ed5612f4a8f5a04fd5c7c9d98e544e49d8c5fc5f77aeeb0bb564934" name="radvd-debuginfo" arch="i686">
  <version epoch="0" ver="1.9.2" rel="9.el7_5.4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.2-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-4" date="1386676800">- Resolves: #948863 - man page scan results for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-6" date="1388664000">- Resolves: #1045179 - use -fno-strict-aliasing for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-8" date="1429185600">- Resolves: #1180991 - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-9" date="1439812800">- Related: #1180991 - rebuilt</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.2" date="1521720000">- Resolves: #1564391 - Write pid file in nodaemon mode
- Fix coverity warnings</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.3" date="1523448000">- Related: 1564391 - Backport file locking and pidfile removal</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.4" date="1523534400">- Check pid file before running main flow
- Enable -Werror=all flag</changelog>
</package>
<package pkgid="33301b1c7c9e39439d83ce9f256f7a361bb187a0a4ca1e577c7f45ffbcfb0aed" name="radvd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="9.el7_5.4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.2-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-4" date="1386676800">- Resolves: #948863 - man page scan results for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-6" date="1388664000">- Resolves: #1045179 - use -fno-strict-aliasing for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-8" date="1429185600">- Resolves: #1180991 - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-9" date="1439812800">- Related: #1180991 - rebuilt</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.2" date="1521720000">- Resolves: #1564391 - Write pid file in nodaemon mode
- Fix coverity warnings</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.3" date="1523448000">- Related: 1564391 - Backport file locking and pidfile removal</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.4" date="1523534400">- Check pid file before running main flow
- Enable -Werror=all flag</changelog>
</package>
<package pkgid="f584ed2a3300b8f5dc6a73e1d2974ed170d7652156b0407f8d2c436c9b7509ef" name="rasdaemon" arch="i686">
  <version epoch="0" ver="0.4.1" rel="33.1.el7_5"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-26.el7" date="1491912000">- add support for Skylake client and server [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-27.el7" date="1494244800">- Fixed error found by covscan in the last patch [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145600">- Identify as Knights Mill systems as such [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145601">- Bump release [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-29.el7" date="1503489600">- Updating Dell labels [1458938]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-30.el7" date="1508414400">- Updated project url [1502400]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-31.el7" date="1516795200">- Added ARM support [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-32.el7" date="1517572800">- Fixed covscan error [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.el7" date="1521460800">- Enabled not standard errors [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.1.el7" date="1522324800">- Refreshed build for zstream [1562017]</changelog>
</package>
<package pkgid="6066286bbbf217ee10fd53b55a551a651fe40868a305818c0ed77fe83226159c" name="rasdaemon" arch="src">
  <version epoch="0" ver="0.4.1" rel="33.1.el7_5"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-26.el7" date="1491912000">- add support for Skylake client and server [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-27.el7" date="1494244800">- Fixed error found by covscan in the last patch [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145600">- Identify as Knights Mill systems as such [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145601">- Bump release [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-29.el7" date="1503489600">- Updating Dell labels [1458938]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-30.el7" date="1508414400">- Updated project url [1502400]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-31.el7" date="1516795200">- Added ARM support [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-32.el7" date="1517572800">- Fixed covscan error [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.el7" date="1521460800">- Enabled not standard errors [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.1.el7" date="1522324800">- Refreshed build for zstream [1562017]</changelog>
</package>
<package pkgid="33bf97622070a7c438164d5e426f68b9711b062e98840c92e66fe9e92e4a41f6" name="rasdaemon" arch="src">
  <version epoch="0" ver="0.4.1" rel="33.1.el7_5"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-26.el7" date="1491912000">- add support for Skylake client and server [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-27.el7" date="1494244800">- Fixed error found by covscan in the last patch [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145600">- Identify as Knights Mill systems as such [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145601">- Bump release [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-29.el7" date="1503489600">- Updating Dell labels [1458938]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-30.el7" date="1508414400">- Updated project url [1502400]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-31.el7" date="1516795200">- Added ARM support [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-32.el7" date="1517572800">- Fixed covscan error [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.el7" date="1521460800">- Enabled not standard errors [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.1.el7" date="1522324800">- Refreshed build for zstream [1562017]</changelog>
</package>
<package pkgid="aa30b68963bdc8f2a3cfd786dc87ab2b99b701d32e6da16e491640f21a6f0f89" name="rasdaemon" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="33.1.el7_5"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-26.el7" date="1491912000">- add support for Skylake client and server [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-27.el7" date="1494244800">- Fixed error found by covscan in the last patch [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145600">- Identify as Knights Mill systems as such [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145601">- Bump release [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-29.el7" date="1503489600">- Updating Dell labels [1458938]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-30.el7" date="1508414400">- Updated project url [1502400]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-31.el7" date="1516795200">- Added ARM support [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-32.el7" date="1517572800">- Fixed covscan error [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.el7" date="1521460800">- Enabled not standard errors [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.1.el7" date="1522324800">- Refreshed build for zstream [1562017]</changelog>
</package>
<package pkgid="c9597891298286dee742d529332e05f7c04087739845bf187262a448012fec2d" name="rasdaemon-debuginfo" arch="i686">
  <version epoch="0" ver="0.4.1" rel="33.1.el7_5"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-26.el7" date="1491912000">- add support for Skylake client and server [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-27.el7" date="1494244800">- Fixed error found by covscan in the last patch [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145600">- Identify as Knights Mill systems as such [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145601">- Bump release [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-29.el7" date="1503489600">- Updating Dell labels [1458938]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-30.el7" date="1508414400">- Updated project url [1502400]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-31.el7" date="1516795200">- Added ARM support [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-32.el7" date="1517572800">- Fixed covscan error [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.el7" date="1521460800">- Enabled not standard errors [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.1.el7" date="1522324800">- Refreshed build for zstream [1562017]</changelog>
</package>
<package pkgid="7995aac8be3efad0c898afa6916a44595ed3a66a096843775270650be577d54f" name="rasdaemon-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.1" rel="33.1.el7_5"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-26.el7" date="1491912000">- add support for Skylake client and server [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-27.el7" date="1494244800">- Fixed error found by covscan in the last patch [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145600">- Identify as Knights Mill systems as such [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145601">- Bump release [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-29.el7" date="1503489600">- Updating Dell labels [1458938]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-30.el7" date="1508414400">- Updated project url [1502400]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-31.el7" date="1516795200">- Added ARM support [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-32.el7" date="1517572800">- Fixed covscan error [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.el7" date="1521460800">- Enabled not standard errors [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.1.el7" date="1522324800">- Refreshed build for zstream [1562017]</changelog>
</package>
<package pkgid="6e3bee2788699f2302fec99da4e5729ec3cd0802607bae3d94beb58951ff6adc" name="rdma-core" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="6bdfa6c6fe2f9b08f133b74bb9d2896606a793e456f0fea11aa6cc2bd5d3f941" name="rdma-core" arch="src">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="6a70054ac58f20b48751e5bfa5b56a135d6ca022e344812ae4183c5f0f0cd7d9" name="rdma-core" arch="src">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="51d5879db1151350dc86f65e1d0e53beff5495b2e8927c202d2eb637ca7ab32a" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="b137fcef18e999299e436302dabd5a249917ae989048061d642917780cf8fd4c" name="rdma-core-debuginfo" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="f2771c21457a7d5f06867d94a9e0e5755203dae9b6bc3f6fe6242725190dcdc9" name="rdma-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="c8af2f8ab6971ad385350807108da8d66fd3b8bd609e6416646aa8f15a64b28c" name="rdma-core-devel" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="bf083d129e9c4c9a5f0254b9c6be4618bc8a3e6653e6d74002db1f82f491a41f" name="rdma-core-devel" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="ccc645deea8ca5f333e53d7ca69c78c405be168c4ab2027979b2322bdca650b0" name="rsyslog" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="8a429dff93c8e601d55800de23f5a5be0953be244f26b74423ffe4b178cc0985" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="7c099d36a679d30cb74c7fe08808ee1a456404cfcb74162a1981ff0dbe3000c5" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="473e19b49f8615597d2eff6f1a97294e08627238d49d4355cf66af3564c60481" name="rsyslog" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="011c4392e3cb40433028a9d59c2bfdcfe31103088e4e8cc33f4cae1a41e8670b" name="rsyslog-crypto" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="a5d7913ab957d255910802ebe18b95f9cf81f593f6856fee7c022257be6590f9" name="rsyslog-crypto" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="fbc18f5d6cdf674c13b126438df3574bc3bbe8807b186b54b4774dfc2c53e830" name="rsyslog-debuginfo" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="c5ea864b831f984886582b4f385cd11bae89e6f67557870fcd6dd74d946ead00" name="rsyslog-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="81846afedbef23e1ba6d05803bdc88b6d0000814ea2e069c837b6d2a9a7943e8" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="442772c8724af8b9c1731590ecb2a63b11196232fabb339089326c27fb9b449f" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="1494e513350f7ad9d4b6a5a52b07ab275c801c2a6d55191367e9fabdb68f118f" name="rsyslog-elasticsearch" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="0cbb170aa574f6564b635b65f69bb071ff30074b64cb69832da76261175b91fb" name="rsyslog-elasticsearch" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="bf764a3bdc007c3e6529b8598e5106b22c1bcb91eae9dabd3c720be5373cd611" name="rsyslog-gnutls" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="97f64415f454e50afcd288a27488105ab4ad8a8556081b1a9694ec0821fbf62e" name="rsyslog-gnutls" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="e34184c1cb1d504abd3c69dfcb27796e2a050f7a56fca87b9fd3804ac3dfd502" name="rsyslog-gssapi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="f7add1cd0e8b0dcf8435d48cf4c998aca75df15b30f5be32c6ce28075bcc24f3" name="rsyslog-gssapi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="fd426ebc07c96f53685fb6ac7fc3cccd623407798750a6005c418f68b80b9fc6" name="rsyslog-libdbi" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="97ac98914c6c69682fdba85561b1c8c9044dd800d4822ef452c27a2844db2eb2" name="rsyslog-libdbi" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="7eabc2743220a23550ed4540f14db5ffa32fccfdfa14faa7d4eceacce57cb0c8" name="rsyslog-mmaudit" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="184a2d800bf5957ac45ffd12cdef10d6c9a630f95336e56b2f54c522d8650a18" name="rsyslog-mmaudit" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="c7df44db62772786a668a87a6b3692fb1de170756d7496438b31ea1795dbeb7f" name="rsyslog-mmjsonparse" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="b6b8695f1e21aeebf408eb57f6723ecd93440b58d1d072379dd0bfa50eacb569" name="rsyslog-mmjsonparse" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="157149d919a42fadde8c92b8a8f6b824c63126aa6ad6256ada7289ad6f469b8d" name="rsyslog-mmnormalize" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="bb9ac6379faa1d047a882f9306413e031a7a7a1549f665625f640d0adcb16475" name="rsyslog-mmnormalize" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="309d8ac3b8beef0cb262ea4951d5b4bc073b1ef227bd48a3946959221bf57295" name="rsyslog-mmsnmptrapd" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="52d478063af1f3e11a0e8e1c18ab24c177411a19f471305e3872f00bd6b41114" name="rsyslog-mmsnmptrapd" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="fe2b9b806cc3893c31c9a38e356cd681178ffe7ecdbf9ba6a02e5d79e1c6a399" name="rsyslog-mysql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="bc2d33995a6b52d93921f14291bc1de576527abcb2192be525004ecebb5cc717" name="rsyslog-mysql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="19f32c01b22fe7a17c25ea846b4b9cda7f1c38e87e87863803959bd9b39fb492" name="rsyslog-pgsql" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="8891bb6837b7ccc5597f8b082c0ef0d2dbeed5d86ed9e347418afed6dd3b18a9" name="rsyslog-pgsql" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="e225e3d666a3be068d904c534bf9b8bca0f1a340de1c73adae6e62bd5b524d2e" name="rsyslog-relp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="2ada45a560395b9891e2e682e5354e1592c213fdc5c54943430ea6b3cc5a3f2b" name="rsyslog-relp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="ea3d2411621c7ad56483d0a4ff960ee9ad8b6319172b2238dfd26e599d56dbb6" name="rsyslog-snmp" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="9d8cc6f8a95c8d99b9fd44937e556628692a2cb2809aa83dbcbbc3001f2efa2c" name="rsyslog-snmp" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="f0221f1d39458cdc71f29368597acab6f88970333846377e6f580d3b047e6f9b" name="rsyslog-udpspoof" arch="i686">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="935602ebe405769ab0aa46355cce54cd15a27644dfba580c1ad1c66e55735993" name="rsyslog-udpspoof" arch="x86_64">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="db78c69886998da1e9a94e56b8c0b432262b1c373d9ed66ccaddb6fb8793774e" name="ruby-libguestfs" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="663fe18443a826960e0bc3d172f07843394084afcdbcbdce4f3137dbdae65ae4" name="sanlk-reset" arch="i686">
  <version epoch="0" ver="3.6.0" rel="1.el7"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-1" date="1411992000">- Update to sanlock-3.2.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-2" date="1414670400">- checksum endian fix</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-1" date="1432123200">- Update to sanlock-3.2.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-2" date="1432296000">- add pkgconfig files</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-1" date="1434715200">- Update to sanlock-3.2.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-2" date="1448971200">- wdmd: prevent probe while watchdog is used</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.3.0-1" date="1456142400">- Update to sanlock-3.3.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.4.0-1" date="1465560000">- Update to sanlock-3.4.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.5.0-1" date="1493208000">- Update to sanlock-3.5.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-1" date="1512475200">- Update to sanlock-3.6.0</changelog>
</package>
<package pkgid="490c18956e15ff8db7e5318357a71508a03838c5b8c45c44c2a6ab5d0cdbba9b" name="sanlock" arch="i686">
  <version epoch="0" ver="3.6.0" rel="1.el7"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-1" date="1411992000">- Update to sanlock-3.2.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-2" date="1414670400">- checksum endian fix</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-1" date="1432123200">- Update to sanlock-3.2.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-2" date="1432296000">- add pkgconfig files</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-1" date="1434715200">- Update to sanlock-3.2.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-2" date="1448971200">- wdmd: prevent probe while watchdog is used</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.3.0-1" date="1456142400">- Update to sanlock-3.3.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.4.0-1" date="1465560000">- Update to sanlock-3.4.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.5.0-1" date="1493208000">- Update to sanlock-3.5.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-1" date="1512475200">- Update to sanlock-3.6.0</changelog>
</package>
<package pkgid="4813a8f41599afd34e5ba2c0503bfba416339ac3c8bb111c1a185408e0a683d2" name="sanlock" arch="src">
  <version epoch="0" ver="3.6.0" rel="1.el7"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-1" date="1411992000">- Update to sanlock-3.2.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-2" date="1414670400">- checksum endian fix</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-1" date="1432123200">- Update to sanlock-3.2.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-2" date="1432296000">- add pkgconfig files</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-1" date="1434715200">- Update to sanlock-3.2.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-2" date="1448971200">- wdmd: prevent probe while watchdog is used</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.3.0-1" date="1456142400">- Update to sanlock-3.3.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.4.0-1" date="1465560000">- Update to sanlock-3.4.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.5.0-1" date="1493208000">- Update to sanlock-3.5.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-1" date="1512475200">- Update to sanlock-3.6.0</changelog>
</package>
<package pkgid="713fd6592ae753a24c4b7e211b50a395ca6b7a8ecab04db991f8f40df7396ef2" name="sanlock-debuginfo" arch="i686">
  <version epoch="0" ver="3.6.0" rel="1.el7"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-1" date="1411992000">- Update to sanlock-3.2.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-2" date="1414670400">- checksum endian fix</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-1" date="1432123200">- Update to sanlock-3.2.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-2" date="1432296000">- add pkgconfig files</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-1" date="1434715200">- Update to sanlock-3.2.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-2" date="1448971200">- wdmd: prevent probe while watchdog is used</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.3.0-1" date="1456142400">- Update to sanlock-3.3.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.4.0-1" date="1465560000">- Update to sanlock-3.4.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.5.0-1" date="1493208000">- Update to sanlock-3.5.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-1" date="1512475200">- Update to sanlock-3.6.0</changelog>
</package>
<package pkgid="1613c41c49a373b01774de1b0855ed4dd05258fb3eedb9da37e75db5150e7f7b" name="sanlock-devel" arch="i686">
  <version epoch="0" ver="3.6.0" rel="1.el7"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-1" date="1411992000">- Update to sanlock-3.2.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-2" date="1414670400">- checksum endian fix</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-1" date="1432123200">- Update to sanlock-3.2.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-2" date="1432296000">- add pkgconfig files</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-1" date="1434715200">- Update to sanlock-3.2.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-2" date="1448971200">- wdmd: prevent probe while watchdog is used</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.3.0-1" date="1456142400">- Update to sanlock-3.3.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.4.0-1" date="1465560000">- Update to sanlock-3.4.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.5.0-1" date="1493208000">- Update to sanlock-3.5.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-1" date="1512475200">- Update to sanlock-3.6.0</changelog>
</package>
<package pkgid="e1ec9a1aedbf4d5e2e6c06cf11d1030b7e76ec19a69e1680abdcb3c4fd5b00ee" name="sanlock-lib" arch="i686">
  <version epoch="0" ver="3.6.0" rel="1.el7"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-1" date="1411992000">- Update to sanlock-3.2.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-2" date="1414670400">- checksum endian fix</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-1" date="1432123200">- Update to sanlock-3.2.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-2" date="1432296000">- add pkgconfig files</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-1" date="1434715200">- Update to sanlock-3.2.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-2" date="1448971200">- wdmd: prevent probe while watchdog is used</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.3.0-1" date="1456142400">- Update to sanlock-3.3.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.4.0-1" date="1465560000">- Update to sanlock-3.4.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.5.0-1" date="1493208000">- Update to sanlock-3.5.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-1" date="1512475200">- Update to sanlock-3.6.0</changelog>
</package>
<package pkgid="900c016338183c51c7fcbb743ba46290427c14282cfeb554a4a3576aa5accdab" name="sanlock-python" arch="i686">
  <version epoch="0" ver="3.6.0" rel="1.el7"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-1" date="1411992000">- Update to sanlock-3.2.2</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.2-2" date="1414670400">- checksum endian fix</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-1" date="1432123200">- Update to sanlock-3.2.3</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.3-2" date="1432296000">- add pkgconfig files</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-1" date="1434715200">- Update to sanlock-3.2.4</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.2.4-2" date="1448971200">- wdmd: prevent probe while watchdog is used</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.3.0-1" date="1456142400">- Update to sanlock-3.3.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.4.0-1" date="1465560000">- Update to sanlock-3.4.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.5.0-1" date="1493208000">- Update to sanlock-3.5.0</changelog>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 3.6.0-1" date="1512475200">- Update to sanlock-3.6.0</changelog>
</package>
<package pkgid="24a69ba142c467915d147a160db4ad3d017a359c6f3e0e5ae84a5698785dc61e" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="137de4b9429d8daea0b5608d22d5530516b3acce65e04c410275b568a8db276d" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="207753dbfb29d8ade6fc41f8e988d6aafea5c5fc3886fa1c7d3cab0f45780b0a" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="abfc65c581f11b3a4871158d7f5bcfcc94107c994275c70ea82abd647ffc5005" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="357b8e0370105fd1d25bf7b8ff82defd1565118e72e3f5c63e15ecb6acd1f9ba" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="136a441217dcd2b89382c23b4bb52c07f0515feb9368a645003f598bf52ce592" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="b3fd709175a3d2925eccc4c8a750e4826e1d3ca250ab3f8dff4e1640c443a1e2" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="261cb03c383bc8862a6afcbfd2f855f3f836469ac49bbd24b6cac6881362760c" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="40430343ad0ea30092e44100d15cd4493c42d787a694d3585416b5c6d03387f5" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="5b45f9a693ee93222314b5deae0f211bc2ae644eab4c031e463909609602e79f" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="fb1e8dfef0017c32d67e7de510377184b36ea480a89b6644dd58018a20b4d1cc" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="743ebb23e19d9b87e4b2ee1a7322654ca44f29ec53d408424bca84b5e2e7846d" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="6e52a652bb1b65be8eda8f9b62e8d6f9659f2fc23638dd19f5121f41d9a2ae55" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="7c6840d31a94427f816d144b798d8ba96e572aca02b28aa132fa70b53468a09b" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="956ed63e2b94335ac98443135c4050a6787de216548f2cd3a2a6409cf601af81" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="090123a1dfbb881eae39dffb2280a8ffdcef890a00afeff0c9bbd4a2432fecc9" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="97f590e992e188174ebd640ab496157ea4864a4d54b81475e97bc3bc0633951c" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="47a96d749ac8d0027bac607e70af80f78ff342c32558906ec70f1478f7127cf1" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="15334d5c7b0378c4a07406c9a4de75ee2b5f3c50816e4482fdb2a4948769dd2e" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="9dd10af675d9606c5c1952d9ac8926381bb678c46f953ce2a13e72f9920c74f1" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="b7732c9f236aa8c4ae85655714f4ca7d3efa74eba3f9efcd8d4b4279a75cc61d" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="4d54763950255069b239f377fd3230a1822048a589c7dff21920c2668a8a0808" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="08796c0d32769dc4be0d6d104dc5a276d5d7fa66f6437a230c8a637aa93cf5c0" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="e0d2f65d82f79dcef166f799ae6491e500a89e39da62fc46961964be04bcd65e" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="e53695e4661bdc3ef388f380a7915dd4f043b0dc9a72e8fb81f7768bbf56d0d2" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="7624fdb0b258d476e7542ab7b9cdf56b34e4a417a5937c842510614edb70bc85" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="94548b888eefd7fa48d745e7dcff2c3b988dfe60a755d6b8fde8ffa175b4bb73" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="ce784d3b770329bf1aaf245ca250092e2ea993f14977865aedd0b2d058523446" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="9a07e058bef0dec916a81c79b3c3793a376ea32ba53b1825e87f1554cd24bdb5" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="dafd43d4e45157d3e85f394c95b3643846c9bf389732f575de55548de4072c4e" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="f0bba69b2e719368b689b04aa4a5fffbb2a60c4ac0132e9b34dd12bc6a43faa4" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="8687e979f3581d0877d8d49b257df3f97fd6fbca793a6519e6559c8db0c833b8" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="d49c026e1ed8f76f7d6eff3db063fd2684868ee22572a18eeeadb5b6c488c50e" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="bb9f8d0f260a38ad78eaa2baf171f8d0abde8e2ed129e7001235b18f5702dc47" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="2a172d8bc0a85417c3ade8d45074c6251fffdc3351cf407a47e20803208dad58" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="28771a49fecc93585587add55e21d56943dcd2a0bd76d400fc8a4c79fd90d285" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="d14fcb61e8b20c3b20fcb14c46d31fa9fc797d745ec20dc904ffa908c84b466c" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="430a7977f94dccd9bdd9f867b073a34d236997419a14afb63deeb774e66dff95" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.3"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-186" date="1516190400">- Allow virt_domains to acces infiniband pkeys.
Resolves: rhbz#1533183
- Label /usr/libexec/ipsec/addconn as ipsec_exec_t to run this script as ipsec_t instead of init_t
Resolves: rhbz#1535133
- Allow audisp_remote_t domain write to files on all levels
Resolves: rhbz#1534924</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
</package>
<package pkgid="c46b5fff2447e9022d75e3366aed984c735c8b3d7402282ad4714fc1ab952584" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="044090c1c4ba6b3713bf0ed85e27df0ca1fecd2afa9023f964a4e29c827fd194" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="02495be643ebbb521af202ecbdb106857f49ccb708795143c3a96fbe7cb28bc0" name="sos" arch="noarch">
  <version epoch="0" ver="3.5" rel="7.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-7.el7.centos" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f3faed22d1e223e314fac1aa68de02e17d481a2cdab4f495b488fdbfa0fc2cc0" name="sos" arch="noarch">
  <version epoch="0" ver="3.5" rel="7.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-7.el7.centos" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5c6755500c44da75755bf66e5187a00d3cd512d0a14dad19985d8d3b449a101a" name="sos" arch="src">
  <version epoch="0" ver="3.5" rel="7.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-7.el7.centos" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4e5a459e930d72d7a69b89c8a3309337b45fcf7f848e0db42eb214495c8f117e" name="sos" arch="src">
  <version epoch="0" ver="3.5" rel="7.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-7.el7.centos" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4a973aee71acf51565511164e6fb20ce71127832674f9058262c73eec35ef9a2" name="sos" arch="noarch">
  <version epoch="0" ver="3.5" rel="9.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-8" date="1526904000">- [docker] backport three container related patches
  Resolves: bz1580526
- [ovn] add two OpenVSwitch plugins
  Resoles: bz1580525</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-9" date="1527768000">- [logs] collect journalctl verbosed logs with --all-logs only
  Resolves: bz1584548</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-9.el7.centos" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2beadca687625ffe8bc2ac9866a63f19ee1e46a4c291126535c2a52b8b880c31" name="sos" arch="noarch">
  <version epoch="0" ver="3.5" rel="9.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-8" date="1526904000">- [docker] backport three container related patches
  Resolves: bz1580526
- [ovn] add two OpenVSwitch plugins
  Resoles: bz1580525</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-9" date="1527768000">- [logs] collect journalctl verbosed logs with --all-logs only
  Resolves: bz1584548</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-9.el7.centos" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="42cb8fde90b211a4e02a1152ed719f1aed6e2f9e254078135fec9f3b2a8ae615" name="sos" arch="src">
  <version epoch="0" ver="3.5" rel="9.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-8" date="1526904000">- [docker] backport three container related patches
  Resolves: bz1580526
- [ovn] add two OpenVSwitch plugins
  Resoles: bz1580525</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-9" date="1527768000">- [logs] collect journalctl verbosed logs with --all-logs only
  Resolves: bz1584548</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-9.el7.centos" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="972718ad203f0c0664aefc0978d1892654b8aaff31b96a91079b02b938adcb25" name="sos" arch="src">
  <version epoch="0" ver="3.5" rel="9.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-8" date="1526904000">- [docker] backport three container related patches
  Resolves: bz1580526
- [ovn] add two OpenVSwitch plugins
  Resoles: bz1580525</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-9" date="1527768000">- [logs] collect journalctl verbosed logs with --all-logs only
  Resolves: bz1584548</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-9.el7.centos" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="da3294ba604f4e51a0f42d8fa7a9056dcaeaa9969c8002c82c0b8e01e5a20c40" name="spice" arch="src">
  <version epoch="0" ver="0.14.0" rel="2.el7_5.3"/>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.12.8-4" date="1500033600">- build with opus support
  Resolves: rhbz#1456832</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-1" date="1501070400">- Rebase to latest upstream release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-2" date="1506081600">- Add lz4-devel BuildRequires
  Resolves: rhbz#1460191</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-1" date="1507723200">- Rebase to 0.14.0 release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2" date="1507809600">- Add streaming patches for use with spice-streaming-agent
  Related: rhbz#1478356</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.1" date="1521115200">- Disable TLSv1.0
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.2" date="1521460800">- Rebuild for missing changelog entry
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.3" date="1524830400">- Revert back to spice 0.12 behaviour where QXL guest resources for cursor
  commands are only released when the current cursor is replaced. This avoids
  a QEMU regression causing crashes during migration
  Resolves: rhbz#1572489</changelog>
</package>
<package pkgid="c0751a083d22d0d3590ce2d3618449e19dcc72e0a2c888f30eafe1b877ec21a8" name="spice" arch="src">
  <version epoch="0" ver="0.14.0" rel="2.el7_5.4"/>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.12.8-4" date="1500033600">- build with opus support
  Resolves: rhbz#1456832</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-1" date="1501070400">- Rebase to latest upstream release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-2" date="1506081600">- Add lz4-devel BuildRequires
  Resolves: rhbz#1460191</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-1" date="1507723200">- Rebase to 0.14.0 release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2" date="1507809600">- Add streaming patches for use with spice-streaming-agent
  Related: rhbz#1478356</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.1" date="1521115200">- Disable TLSv1.0
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.2" date="1521460800">- Rebuild for missing changelog entry
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.3" date="1524830400">- Revert back to spice 0.12 behaviour where QXL guest resources for cursor
  commands are only released when the current cursor is replaced. This avoids
  a QEMU regression causing crashes during migration
  Resolves: rhbz#1572489</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.14.0-2.4" date="1528804800">- Don't mute Record channel on client reconnection
  Resolves: rhbz#1582601</changelog>
</package>
<package pkgid="11120b8e75114440b094c89902130cfffda2c970ba51f3c744d2b8549981ccf7" name="spice-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="2.el7_5.3"/>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.12.8-4" date="1500033600">- build with opus support
  Resolves: rhbz#1456832</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-1" date="1501070400">- Rebase to latest upstream release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-2" date="1506081600">- Add lz4-devel BuildRequires
  Resolves: rhbz#1460191</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-1" date="1507723200">- Rebase to 0.14.0 release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2" date="1507809600">- Add streaming patches for use with spice-streaming-agent
  Related: rhbz#1478356</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.1" date="1521115200">- Disable TLSv1.0
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.2" date="1521460800">- Rebuild for missing changelog entry
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.3" date="1524830400">- Revert back to spice 0.12 behaviour where QXL guest resources for cursor
  commands are only released when the current cursor is replaced. This avoids
  a QEMU regression causing crashes during migration
  Resolves: rhbz#1572489</changelog>
</package>
<package pkgid="cfa046322f7e030abf50c763063b9adaed2a74c9a19077e8701a78d3ce7e7e15" name="spice-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="2.el7_5.4"/>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.12.8-4" date="1500033600">- build with opus support
  Resolves: rhbz#1456832</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-1" date="1501070400">- Rebase to latest upstream release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-2" date="1506081600">- Add lz4-devel BuildRequires
  Resolves: rhbz#1460191</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-1" date="1507723200">- Rebase to 0.14.0 release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2" date="1507809600">- Add streaming patches for use with spice-streaming-agent
  Related: rhbz#1478356</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.1" date="1521115200">- Disable TLSv1.0
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.2" date="1521460800">- Rebuild for missing changelog entry
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.3" date="1524830400">- Revert back to spice 0.12 behaviour where QXL guest resources for cursor
  commands are only released when the current cursor is replaced. This avoids
  a QEMU regression causing crashes during migration
  Resolves: rhbz#1572489</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.14.0-2.4" date="1528804800">- Don't mute Record channel on client reconnection
  Resolves: rhbz#1582601</changelog>
</package>
<package pkgid="70f9f3f32b689550bbebf5277cfaa54f1f30d38b0e0dac4db13b39d0d34c4b60" name="spice-glib" arch="i686">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="08b43970575b222378b8824b8d8158f2807c1ff0f538139a87cfd1b9ed37f0aa" name="spice-glib" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="95c7fcb915113499c4282fd4830edc702d09bbf50b45f6ee09572722aaa40e8a" name="spice-glib-devel" arch="i686">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="366fcc6b59780d3fd23de8e13dbdb0c4c56d7eaedf30751304d27e7a27e97510" name="spice-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="289fe66cb206cec702fc80ab4fd53806709a194386b912345ffa2a25732c1bfe" name="spice-gtk" arch="src">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="96e1d3e3ae6085644a6beb84fb051abe5d5efea88388129ab959e822ccf47efa" name="spice-gtk" arch="src">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="9ce55191c6cf609476c5292f4164718b887830a894e9f7794ba0e336f8943229" name="spice-gtk-debuginfo" arch="i686">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="58dbca44b3105b064e75b26b1af6a10fada20bcef3f3a282ec624f7bb803d49d" name="spice-gtk-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="0d84de69899f14a37700949c337d3ac153b25843dfc443488b524445695c3e33" name="spice-gtk-tools" arch="i686">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="63bb6db42ca082cdaa5ea7b13a5ce88f2cb40c55d610b8a7bca621f92ba14ac2" name="spice-gtk-tools" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="b1b8d3bb089cd34beedd57855f27a39b2201888aa2075c5f18ceea3d02fd3090" name="spice-gtk3" arch="i686">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="13d64adb64827b079058f3b42fd40e07a97bbb29270b0e489b65ca36ebfc528f" name="spice-gtk3" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="40b53cb0a46270fd1ff5131ff7248b6f88347317845f4c3eea2dbfa809b58842" name="spice-gtk3-devel" arch="i686">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="d60782a7d8b93b8e77fa76fd0ee4e31ce00a2a7fc34bd3c812cfe437deeba611" name="spice-gtk3-devel" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="2aced713fe6f28b93428a567d73c7b499ac78fceead273798538d45a4c3c3ce1" name="spice-gtk3-vala" arch="i686">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="607f1521451b0513def4308344b71b10b093bd2347639b6de656030671db1024" name="spice-gtk3-vala" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="095c9b1b337bdf1d09f74a753c05c8decbe3d014689d93579a35a3eb2206ca4d" name="spice-server" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="2.el7_5.3"/>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.12.8-4" date="1500033600">- build with opus support
  Resolves: rhbz#1456832</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-1" date="1501070400">- Rebase to latest upstream release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-2" date="1506081600">- Add lz4-devel BuildRequires
  Resolves: rhbz#1460191</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-1" date="1507723200">- Rebase to 0.14.0 release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2" date="1507809600">- Add streaming patches for use with spice-streaming-agent
  Related: rhbz#1478356</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.1" date="1521115200">- Disable TLSv1.0
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.2" date="1521460800">- Rebuild for missing changelog entry
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.3" date="1524830400">- Revert back to spice 0.12 behaviour where QXL guest resources for cursor
  commands are only released when the current cursor is replaced. This avoids
  a QEMU regression causing crashes during migration
  Resolves: rhbz#1572489</changelog>
</package>
<package pkgid="a5435d29e074c0a55f5263d0b25e2349c2981931ae9ccba3daa1544d0feaf78d" name="spice-server" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="2.el7_5.4"/>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.12.8-4" date="1500033600">- build with opus support
  Resolves: rhbz#1456832</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-1" date="1501070400">- Rebase to latest upstream release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-2" date="1506081600">- Add lz4-devel BuildRequires
  Resolves: rhbz#1460191</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-1" date="1507723200">- Rebase to 0.14.0 release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2" date="1507809600">- Add streaming patches for use with spice-streaming-agent
  Related: rhbz#1478356</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.1" date="1521115200">- Disable TLSv1.0
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.2" date="1521460800">- Rebuild for missing changelog entry
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.3" date="1524830400">- Revert back to spice 0.12 behaviour where QXL guest resources for cursor
  commands are only released when the current cursor is replaced. This avoids
  a QEMU regression causing crashes during migration
  Resolves: rhbz#1572489</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.14.0-2.4" date="1528804800">- Don't mute Record channel on client reconnection
  Resolves: rhbz#1582601</changelog>
</package>
<package pkgid="23dd7b75044067d3395005d2acfb688c18cff7b2bfd56ea6e0fc98b613aa070c" name="spice-server-devel" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="2.el7_5.3"/>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-2" date="1493121600">- Drop clients immediatly if the magic they send is wrong
  Resolves: rhbz#1416692</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.12.8-4" date="1500033600">- build with opus support
  Resolves: rhbz#1456832</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-1" date="1501070400">- Rebase to latest upstream release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-2" date="1506081600">- Add lz4-devel BuildRequires
  Resolves: rhbz#1460191</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-1" date="1507723200">- Rebase to 0.14.0 release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2" date="1507809600">- Add streaming patches for use with spice-streaming-agent
  Related: rhbz#1478356</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.1" date="1521115200">- Disable TLSv1.0
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.2" date="1521460800">- Rebuild for missing changelog entry
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.3" date="1524830400">- Revert back to spice 0.12 behaviour where QXL guest resources for cursor
  commands are only released when the current cursor is replaced. This avoids
  a QEMU regression causing crashes during migration
  Resolves: rhbz#1572489</changelog>
</package>
<package pkgid="fe4050a398d12818b0b82f0e134098d28ae68627abf625c3ee54e3ce4b1f6b50" name="spice-server-devel" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="2.el7_5.4"/>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.12.8-3" date="1498824000">- Prevent potential buffer/integer overflows with invalid MonitorsConfig messages
  sent from an authenticated client
  Resolves: CVE-2017-7506</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.12.8-4" date="1500033600">- build with opus support
  Resolves: rhbz#1456832</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-1" date="1501070400">- Rebase to latest upstream release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; 0.13.90-2" date="1506081600">- Add lz4-devel BuildRequires
  Resolves: rhbz#1460191</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-1" date="1507723200">- Rebase to 0.14.0 release
  Resolves: rhbz#1472948</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2" date="1507809600">- Add streaming patches for use with spice-streaming-agent
  Related: rhbz#1478356</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.1" date="1521115200">- Disable TLSv1.0
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.2" date="1521460800">- Rebuild for missing changelog entry
  Related: rhbz#1551072</changelog>
  <changelog author="Christophe Fergeau &lt;cfergeau@redhat.com&gt; - 0.14.0-2.3" date="1524830400">- Revert back to spice 0.12 behaviour where QXL guest resources for cursor
  commands are only released when the current cursor is replaced. This avoids
  a QEMU regression causing crashes during migration
  Resolves: rhbz#1572489</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.14.0-2.4" date="1528804800">- Don't mute Record channel on client reconnection
  Resolves: rhbz#1582601</changelog>
</package>
<package pkgid="df7d3e24687adacebe2cde65d1c2f2ecabffbed0065c7c4ff6ab11666d23eb67" name="srp_daemon" arch="i686">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="2a67df4252c2e79f7274f0a4b4ff8f360406a7f3416f076bae9e13f4b08f0d58" name="srp_daemon" arch="x86_64">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="048f35cf64412589d6cdf13342b01a39e35c1b8e86159a641114e8c0271449cc" name="sssd" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="cb01d00aef8c52bba278a9c4c90f72a6efcf965754724ed065a0be3b670732f4" name="sssd" arch="src">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="144b907eaff7c05b887410632826de7e4fc7431d5bf6a9fbc082f4f88028105c" name="sssd" arch="src">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="cb9457a37ccaa756df00a2eea51fbaebdabaf6aff607cc1e67bb32593697012d" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="b80777689cb93d83c8b220a50f436c4fcf3cd2a7640b45495c4d744125dcc6c6" name="sssd-ad" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="c68b5ba2e8bcd6e58ea301e3becd05cd6646e6d59d261576f401d1425d7b7463" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="09894ba1c7308c624253089d6efeca85dd72f55dc18ecc2d755e38fd15c8a97f" name="sssd-client" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="22437971c30b22a976f9f0be3e2e1fc896d78acf2ee1791ccea04940100b8cb2" name="sssd-client" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="94ab33af5e6fcf20a712593c03141748ff727c6ae798e62689db2bef7b232529" name="sssd-common" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="07e8014c9d6999563ad6b0d1ce9f9655808bab6c6fb3079e82d58d53a975ae5a" name="sssd-common" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="cbef42ac38b7f25fdaaff475269404c3c2a4cad3ecf3c5d9618dcf1d3039e23d" name="sssd-common-pac" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="41bf680024f72ed52056e2a3deff2b2408bb567b2fa1de9f1e00041148749017" name="sssd-common-pac" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="cd0a7a6945b32013f36e32e4180321151ef26abe23c33598802f87cc0eabec36" name="sssd-dbus" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="3811b102006a95f6868342adfd145716cedab3e20778bdd0d50f67f907cf0c4c" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="6eae261030452646db648d2c4cf108b670486cc352db5788e9124c0187b9d24e" name="sssd-debuginfo" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="daad3e651f17552fc2844b8cdc501cddfd3fe2114057d86117b370f4d162db26" name="sssd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="7251d0e2c75f8d0f51cc436511418cea382315ca5e9a43f450dc51d2a9bf48f0" name="sssd-ipa" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="4e9dbfac1fab28a85c4e4e6549d0a40cf8c6b837fa19e3c9ab25e3a03ad525d4" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="e99a523f736d57a60dca16b87ed791f805c4f9907eeaa1e1658ba0cf1f427395" name="sssd-kcm" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="30a618846fdbcd286a0fa384af3ac180e490803b0b0f55f9d663762997544e38" name="sssd-kcm" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="3db4828a9dd5bccd154e158f1e0fed31b0d51164c627b30ae45813c6b3c48b2b" name="sssd-krb5" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="e0418902ea4b1121d68c3ebcb91993ea30121286c9da0fadfccc6b25cf2a11e4" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="0e02712acc27ee0933bb2484d29ef77166ba99418ccbcff1430ab0743b9af2a9" name="sssd-krb5-common" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="4355fbfbec011988998b502d1d3cac17bf95992d5fbac4ee1658af3e866f6e15" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="37de7815e8e3f8bec711d14667ce98f05bf93fcb3577920d87310fe2b3444868" name="sssd-ldap" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="1589127eb640ac37a6dafb7d3ed029589e735c7b699310e3d8a11d5d7fde8081" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="b8518b9fe4b146e8170007fdc32b6f43d441be7bcc31bd6434eb1aa179feef66" name="sssd-libwbclient" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="39e7fead42a06f4970152104bf3e19d4278295b5c7425af2e6e42ed9e4f60510" name="sssd-libwbclient" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="3173c4950794a03e97587b731e5751921e4276f7a16baf53b88a765d00159798" name="sssd-libwbclient-devel" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="e70a23393539f9017b5d93e31919342fbce2045f6804992b8733a803272a7769" name="sssd-libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="3a0597b99e028c1249a57c38c27b50de97c6a614787aea9f0aa4e3b53bceb199" name="sssd-polkit-rules" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="3bb6c96faaedeffbde276e1ada4b7cae3de050e75d9818bb7545f6a792dfae01" name="sssd-polkit-rules" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="e756b4ab61a3c47ce9fe636778ab6bc6a35d710985b599d79267dbd86facaa77" name="sssd-proxy" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="55d66313c2f89cbede184543b6f78342a0fe53825aaee5d8f128739e28d2535b" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="aa1c0b531ac0b62e89fd27598867dc6f14c123df433cef359d31fc85f5391abe" name="sssd-tools" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="2bf12e664fb1268ae303a52bc4c5f7b428d172c12c23e9f173b1b8474f3b0ba4" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="8cd40f5ee3fd7304e19741e641f9abea5b413daa7e4d5f9baf2cfcec7da56cfe" name="sssd-winbind-idmap" arch="i686">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="818dd449802487757a4224d8daa178ffee3f0a09e68c19db09a278887c831147" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="c074ba6dab4b5a3d11b6feae59347a95a5e28fd9766be8b8725bb32dbe6856d7" name="sudo" arch="i686">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="ed8e381581437f159781a8c036e80294fc5f6424266a1c45a46b47c3c988a99c" name="sudo" arch="src">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="a8168df53719774dcd6950da3c5617fdfd2b004bc9186b29c4c3c11dbce8c549" name="sudo" arch="src">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="05f7cd1f90643b5b239cdbd371a84ad83bf4aa422157ffab8e8a0f0eee2cf59a" name="sudo" arch="x86_64">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="c92fad774fe937876244f1bade9a9bf8b937b5f78138352fecfe5c6c8024e5fd" name="sudo-debuginfo" arch="i686">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="277d249f7706550529bfa353cf544515216d79e83ed6556544c5eff2c0af9c54" name="sudo-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="ed6d576648d222cf37ff8a1b46e9d95be51b7980771081b986af68733f7e986a" name="sudo-devel" arch="i686">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="a6fcec3324cf39d8a512f67d1667d9b943e94d0754ed71186011b176567a54c4" name="sudo-devel" arch="x86_64">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="b84d654b8755dc6532ab710366bbe7fb2d76bde426c12a8fca3ce6b54f699273" name="systemtap" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="bfeeb79b38ebd2d00bf2270d5fe4ff1e3f62298d774a85e306bb10be40a232cc" name="systemtap" arch="src">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="92342692a6cfee1ab2b0beda18a71d57ecd4d720c000b1ce6154cc82f07b1721" name="systemtap" arch="src">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="586da1d63eca3fa7ce6a81b5fe44ff5036556c9993c05ecf2af5315c6b6501f4" name="systemtap" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="df4a0d2b0a86ba5f502eb0cdf025bc2df213a57bbaa4ebe8a21fe089b6664951" name="systemtap-client" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="8a68314648882e40da0251d368ec5c69494462ae07c1c49057efed952c73ae84" name="systemtap-client" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="868fe04434953a95247fac34ab0e9071d389ba162fec99f3da006ef479aa99b1" name="systemtap-debuginfo" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="3f5e96f606e55382e2e8987a0259cfbe94fd7baf6e5ac804b6ac96f3eb73ddb4" name="systemtap-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="a134e246e155ca6b6daf7db44dec271db745abca4d814b519add3a976b7e39c4" name="systemtap-devel" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="4ab089b6d64cc09302f26d91ce5c26c2cfa2a650190a2db2f34eb9d4ad688c5b" name="systemtap-devel" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="0e6d06f28fd7c3af845b3f72c67f8fe568640fd60e5da34ba425ed9bf6dee130" name="systemtap-initscript" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="fb450f86b9e42d87c1a93cf7203e7f6a43acbd8f83bc93b155b4504178122646" name="systemtap-initscript" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="3f477226070896018470c989589725da4b322d9d9a5e8b5280f7270b2e2ffb12" name="systemtap-runtime" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="b6d62f398a85d0770dbbc2531c44925603d8e1bdaa7dd5966353e3d175573c2f" name="systemtap-runtime" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="dff6a49660e26e14a9b61d4ddf5bbbebafac3f3218a392ba66ca3f1fb0ec93ab" name="systemtap-runtime-java" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="4f3bb43c8efa946b6c2795e01a9ee99fb4f3c1ea4d2b874a07c463afd10b3793" name="systemtap-runtime-java" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="dcb3b960637d00b332276a8a7c11a1fcf0b3f0f00b7be7c970dada624713fdc6" name="systemtap-runtime-python2" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="81749b7ccfff3af0d27668178f8344bf8095c93c1f7c384138d35f5e280501c8" name="systemtap-runtime-python2" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="db289e18ef99249290972ae5c95e1892115d59eba3a87b810f02135e6407d51d" name="systemtap-runtime-virtguest" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="29fc55a450a07d4ec2ba343ffe1ba677512c4d6d3c52f2d2bde8590c87aeba20" name="systemtap-runtime-virtguest" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="b70e8dff95bf0ddc1779a0906e3dedf75a3118fe53c0621b3c21758f173d112e" name="systemtap-runtime-virthost" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="f6d2a1a1ca242bae19fa4225595f8f2d080aae09b42908d2deb9455724ff7dff" name="systemtap-runtime-virthost" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="44f3383ab29100d1a9b771de90e3ad2f45dd7a364df98a80739a09f6e2d36a84" name="systemtap-sdt-devel" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="18c79f43f5858e3847ccd3eebb9d0ff34c9b5eacb287edfcc54b38106467c177" name="systemtap-sdt-devel" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="5fe2065e24937ee6e77f6447f9c1a61b82482a49aa12743ce9be461cad485e2c" name="systemtap-server" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="72fb29e3047335db07d50254fdae79c9264caf9b3c59cde26e97eb6b7635073c" name="systemtap-server" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="1ede36a405a29cc10d6f3395987f999fe89241e3babd3470610b266def4b12ad" name="systemtap-testsuite" arch="i686">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="77119668e7d9f4ab858733ea691ffe799fb06bc2223108357bd1fc9286c1cca0" name="systemtap-testsuite" arch="x86_64">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="6f782fd020968ea28160e506690f76d03ff2affaa935cb134f1e6e2fd17b927e" name="targetcli" arch="noarch">
  <version epoch="0" ver="2.1.fb46" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-1" date="1412856000">- New upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-2" date="1415102400">- add fix-session-detail.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102401">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
</package>
<package pkgid="906c2aac39eae4b317cc1ad50f11601666d2b6a51cef2add75cf10a35e8c767f" name="targetcli" arch="noarch">
  <version epoch="0" ver="2.1.fb46" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-1" date="1412856000">- New upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-2" date="1415102400">- add fix-session-detail.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102401">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
</package>
<package pkgid="c239f420cc9bbea6b21937e46656fcaf9d709347fa5d293490c0400db65b41cd" name="targetcli" arch="src">
  <version epoch="0" ver="2.1.fb46" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-1" date="1412856000">- New upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-2" date="1415102400">- add fix-session-detail.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102401">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
</package>
<package pkgid="cecd4257ecf39eca81c8a41a443306cf840b270d5b703e6ea238dc2b04e85684" name="targetcli" arch="src">
  <version epoch="0" ver="2.1.fb46" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-1" date="1412856000">- New upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-2" date="1415102400">- add fix-session-detail.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102401">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
</package>
<package pkgid="a7b864d6d9a156bba85501273e5265170998eee1bc50fe6a09ead191ab178715" name="targetcli" arch="noarch">
  <version epoch="0" ver="2.1.fb46" rel="6.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102400">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-5" date="1528113600">- saveconfig: way for block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-6" date="1528891200">- handle backups with block-level delete</changelog>
</package>
<package pkgid="5cd627a1758c71357a8eb0396feb88eaa498ef511279e3f63833d4c2f8ad8043" name="targetcli" arch="noarch">
  <version epoch="0" ver="2.1.fb46" rel="6.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102400">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-5" date="1528113600">- saveconfig: way for block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-6" date="1528891200">- handle backups with block-level delete</changelog>
</package>
<package pkgid="2ea4f8f02b37be300f14bcf84309c2c7e155aae4450d13db4a4d8df3cdb053fe" name="targetcli" arch="src">
  <version epoch="0" ver="2.1.fb46" rel="6.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102400">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-5" date="1528113600">- saveconfig: way for block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-6" date="1528891200">- handle backups with block-level delete</changelog>
</package>
<package pkgid="4e09fd0fe55eac5b926936c0ff5027de8e0d610f4cf8137c222c92286788d457" name="targetcli" arch="src">
  <version epoch="0" ver="2.1.fb46" rel="6.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102400">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-5" date="1528113600">- saveconfig: way for block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-6" date="1528891200">- handle backups with block-level delete</changelog>
</package>
<package pkgid="b98e288944cd08b49899c7fb1960958ff88d8b631622d86ae90fff0ecdac9f2d" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="1527163200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="e28f0bcca14b7a5d03d80d7edb1960d19e7faceffe4daa56c913a142bc39c22b" name="thunderbird" arch="src">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="72336704">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c679ff73c83d5630a9401348c423dfcbcfb6571cdd11d36e8a973faa5a627a74" name="thunderbird" arch="src">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="1527163200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b09359502dc8c6e46de1d023d8224753c6ab2f866eb453e719c1d6c0e96baf38" name="thunderbird" arch="src">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="1527163200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="94bc6d25e31076ea9812397c429a637460b2312d1a8e0e6df95319971c13388e" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="72336704">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="322f3560cb9c479b68c11694c96a2e6ed26367efb07b2bf18adbb8951eb85199" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="1527163200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b4ccad6b7defe780e4983cf768be7ebcd50f5991af128073365c85d3803b4a8a" name="thunderbird" arch="i686">
  <version epoch="0" ver="52.9.1" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.9.1-1" date="1531224000">- Update to 52.9.1</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.9.1-1" date="1532433600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="0bad36d360a23e70faaea7ef7eefda99bd1ca344e65c872ddc7fd83755338413" name="thunderbird" arch="src">
  <version epoch="0" ver="52.9.1" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.9.1-1" date="1531224000">- Update to 52.9.1</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.9.1-1" date="1532433600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="28247c9a2efd6c7f729ce69c02236016f3594c35b3c5f9bfa5cf4042651e6760" name="thunderbird" arch="src">
  <version epoch="0" ver="52.9.1" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.9.1-1" date="1531224000">- Update to 52.9.1</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.9.1-1" date="1532433600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="fea1275c971c2c0927800f436fdc11557c8688c2f370354adf109f363184bbb8" name="thunderbird" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.9.1-1" date="1531224000">- Update to 52.9.1</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.9.1-1" date="1532433600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="40b36b7036599009aa97c2400f0ea968393038b2723125845df1445a2f42381a" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="1527163200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ab11aeab12fbdf36e1af902539ef024dc723ff6f4fb7f99faf7e52024bd6b0ef" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="72336704">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c7c1efe5d64504378f0eeb30364eeb0256e759a8663651210b837fd2b8e4755b" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="1527163200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="64b85cde0ad701819e4d6dbc9563f652d0d1f443c1604986d6bbf00ce30d9abe" name="thunderbird-debuginfo" arch="i686">
  <version epoch="0" ver="52.9.1" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.9.1-1" date="1531224000">- Update to 52.9.1</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.9.1-1" date="1532433600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c0c7e00023ddd632b16c13c8f0d1fde83e024509d970f83be078590e1e572617" name="thunderbird-debuginfo" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.9.1-1" date="1531224000">- Update to 52.9.1</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.9.1-1" date="1532433600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="801b6eeb725e97f0764ff7357eae20792cd8fc038adc26c100d02e9b140171b6" name="time" arch="src">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="fc6a87162d20e21cabf97f698989cf666cf2565662495625b5c4572adade6aa0" name="time" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="7d666f916411a989938beb181aa1b4aac8c5842ef36e8865464ff20a0349cf08" name="time-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.7" rel="45.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-36" date="1248609600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild</changelog>
  <changelog author="Roman Rakus &lt;rrakus@redhat.com&gt; - 1.7-37" date="1249992000">- Don't print errors in post and preun sections (#515936)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-38" date="1297252800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-39" date="1305115200">- Fix maximal RSS report (bug #702826)
- Clean spec file
- Recompute CPU usage at finer level (bug #527276)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-40" date="1326542400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-41" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.7-42" date="1346932800">- Package AUTHORS and ChangeLog</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.7-43" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-44" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.7-45" date="1390564800">- Mass rebuild 2014-01-24</changelog>
</package>
<package pkgid="8d6372949efdd3d1b0a2687eb764a298ff4bb607ff8eaf80b3f2e4ec1f7dcc38" name="tkinter" arch="i686">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="332c2b6ba0c328f34509a76caf3e8e3aaa7098e3185178ec3b42f0c4e8f38f0c" name="tkinter" arch="x86_64">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="1ca522c642b4a37122e64617996b4ba4be4d19f0617ea7a709b3c95bbf9a3ed1" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="841994b4a938a7d056427cf1bc81ce1a9d62c5d7a90a447b5542e408edaace29" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="86267b75deea0467db599e4aaab870092f84bd6b3f2a16c24ec99a27db2d2530" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="3964784b00927d572dbcc98e3a869a9ea31833b5628f38e154a1ef3921ab86e8" name="tzdata" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="87db3faa34c9dc41e256c46be93b102e9b8601de5141662c29a060a0d328c040" name="tzdata" arch="src">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="929c63043ab5a3193ca502bfaef5e15ff4a575c5cd0e160fa0764b84f4a743ba" name="tzdata" arch="src">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="995415cd4013fb5d17511731439e85a7d0b298a0a16cb2105bf112c2bb1b6872" name="tzdata" arch="src">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="dcc413c61ce921cc3fc5b904b842058245aacda69363a59501334f270e202979" name="tzdata" arch="src">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="d504971ce88f27e9032aecbcbbe60105c8f6aa92e8f89ea0ee28f2febf293e8d" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="a8dbe3586d3e971cb9a50afa2fc274f543520860382202503fba5f4a20d0b13b" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="de92c04865e80892002ea5c341f0b2bc63fa05211622c564a7089b0be862b84a" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="22f608e4fd91c4361de8a87331cb3fbaefa6897752db0b6450cc48cce5ede851" name="tzdata-java" arch="noarch">
  <version epoch="0" ver="2018e" rel="3.el7"/>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016i-1" date="1478088000">- Rebase to tzdata-2016i:
  - Cyprus is now split into two time zones as of 2016-10-30
  - Tonga will reintroduce DST on 2016-11-06</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2016j-1" date="1479902400">- Rebase to tzdata-2016ij
  - Saratov region of Russia is moving from +03 offset to +04 offset
    on 2016-12-04.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017a-1" date="1488369600">- Rebase to tzdata-2017a.
  - Mongolia no longer observes DST. (BZ #1425214)
  - Add upstream patch to fix over-runing of POSIX limit on zone abbreviations.
- Add zone1970.tab file to the install list. (BZ #1414829)</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017b-1" date="1490011200">- Rebase to tzdata-2017b.
  - Haiti resumed DST on March 12, 2017.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2017c-1" date="1508760000">- Rebase to tzdata-2017c.
  - Northern Cyprus will revert to using EQ rules on October 29, 2017.
  - Sudan will switch from +03 to +02 on November 1, 2017.
  - Tonga will not change it's clocks on Novemeber 5, 2017 ending it's
    experiment with DST.
  - Fiji DST will end on January 14, 2018 rather than January 21, 2018.
  - Namibia - starting September 3, 2017 switches from +)1 with DST to
    +02 all year.  This change takes effect April 1, 2018.
  - Turks &amp; Caicos changes from -04 all year to -05 with US DST starting
    on March 11, 2018.  Effective change date is November 4, 2018. 
  - tzdata now includes two text versions of the time zone data - tzdata.zi
    and leapseconds. 
  - Includes two patches to deal with build issues.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018b-1" date="1516276800">- Rebase to tzdata-2018b
  - São Tomé and Príncipe changed from +00 to +01 on January 1, 2018
  - Brazil's DST will start on the first Sunday in November
  - Irish standard time is in the summer now, not the winter.
  - Support for the new zic -t option.
  - Add back pacificnew file omitted in tzdata-2018a</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018c-1" date="1516708800">- Rebase to tzdata-2018c
  - Revert the Irish time changes that relied on negative DST offsets.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018d-1" date="1521720000">- Rebase to tzdata-2018d
  - DST for Asia/Gaza and Asia/Hebron has changed from March 31 to March 24.
  - Antarctica/Casey station changed to UTC+8 on March 11.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-2" date="1525435200">- Rebase to tzdata-2018e
  - North Korea changed from UTC+8:30 to UTC+9 on May 5, 2018.
  - In this update, the upstream project now defaults to using
    the "vanguard" data implementation which includes negative DST offsets.
    However, we are continuing to provide the "rearguard" format
    for data which does not use negative DST offsets to provide
    better compatibility with existing tools.  We intend to transition
    to the "vanguard" data implementation in the future.</changelog>
  <changelog author="Patsy Franklin &lt;pfrankli@redhat.com&gt; - 2018e-3" date="1525608000">- Update the tzdata2018e.tar.gz file. Make the tzdata.zi file during prep.</changelog>
</package>
<package pkgid="8899fc15a324a2c9873791999bf21e4599db137253c374942a4bc7474a9ff711" name="vdo" arch="src">
  <version epoch="0" ver="6.1.0.168" rel="18"/>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.97-13" date="1513080000">- Remove vdo --noRun option
- Clean up vdo error handling
- Prevent python stack traces on vdo errors
- Add more bounds checking to indexMem
- Resolves: rhbz#1508544
- Resolves: rhbz#1508918
- Resolves: rhbz#1520991
- Resolves: rhbz#1522754</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.106-13" date="1513857600">- Handle bogus --confFile and --logfile arguments
- Produce more informative vdo manager high-level help
- Generate command-specific unrecognized argument messages
- Resolves: rhbz#1520927
- Resolves: rhbz#1522750
- Resolves: rhbz#1525560</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.114-14" date="1515585600">- VDO automatically chooses the proper write policy by default
- Package uninstall removes vdo.service symlinks
- Resolves: rhbz#1525305
- Resolves: rhbz#1531047</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-14" date="1516363200">- Added a specific error for less than 1 block growLogical.
- Resolves: rhbz#1532653</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-15" date="1517486400">- vdo growLogical by less than 4K gives correct error
- Fix URL to point to GitHub tree
- Resolves: rhbz#1532653
- Resolves: rhbz#1539059</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-16" date="1517918400">- Updated summary and description
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-16" date="1518004800">- VDO start command now does index memory checking
- Module target is now "vdo" instead of "dedupe"
- VDO remove with no device no longer puts a spurious file in /dev
- ANsible module no longer fails on modification operations
- Resolves: rhbz#1510567
- Resolves: rhbz#1530358
- Resolves: rhbz#1535597
- Resolves: rhbz#1536214</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-16" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-17" date="1525003200">- Updated source to use GitHub
- Fixed bug where VDO would always be created with a dense index even when
  a sparse index was requested.
- Resolves: rhbz#1572496</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-18" date="1525003201">- Bumped NVR for z-stream candidate</changelog>
</package>
<package pkgid="170c8ea4dc94d547da000a88fa970c2c5c0e31419bbf974f20ef8d4daeb08bdd" name="vdo" arch="x86_64">
  <version epoch="0" ver="6.1.0.168" rel="18"/>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.97-13" date="1513080000">- Remove vdo --noRun option
- Clean up vdo error handling
- Prevent python stack traces on vdo errors
- Add more bounds checking to indexMem
- Resolves: rhbz#1508544
- Resolves: rhbz#1508918
- Resolves: rhbz#1520991
- Resolves: rhbz#1522754</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.106-13" date="1513857600">- Handle bogus --confFile and --logfile arguments
- Produce more informative vdo manager high-level help
- Generate command-specific unrecognized argument messages
- Resolves: rhbz#1520927
- Resolves: rhbz#1522750
- Resolves: rhbz#1525560</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.114-14" date="1515585600">- VDO automatically chooses the proper write policy by default
- Package uninstall removes vdo.service symlinks
- Resolves: rhbz#1525305
- Resolves: rhbz#1531047</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-14" date="1516363200">- Added a specific error for less than 1 block growLogical.
- Resolves: rhbz#1532653</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-15" date="1517486400">- vdo growLogical by less than 4K gives correct error
- Fix URL to point to GitHub tree
- Resolves: rhbz#1532653
- Resolves: rhbz#1539059</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-16" date="1517918400">- Updated summary and description
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-16" date="1518004800">- VDO start command now does index memory checking
- Module target is now "vdo" instead of "dedupe"
- VDO remove with no device no longer puts a spurious file in /dev
- ANsible module no longer fails on modification operations
- Resolves: rhbz#1510567
- Resolves: rhbz#1530358
- Resolves: rhbz#1535597
- Resolves: rhbz#1536214</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-16" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-17" date="1525003200">- Updated source to use GitHub
- Fixed bug where VDO would always be created with a dense index even when
  a sparse index was requested.
- Resolves: rhbz#1572496</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-18" date="1525003201">- Bumped NVR for z-stream candidate</changelog>
</package>
<package pkgid="9032e0e7c507ecda2b5ada0139c4918a02290dc9989c5d38b7ecf150dc55354e" name="vdo-debuginfo" arch="x86_64">
  <version epoch="0" ver="6.1.0.168" rel="18"/>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.97-13" date="1513080000">- Remove vdo --noRun option
- Clean up vdo error handling
- Prevent python stack traces on vdo errors
- Add more bounds checking to indexMem
- Resolves: rhbz#1508544
- Resolves: rhbz#1508918
- Resolves: rhbz#1520991
- Resolves: rhbz#1522754</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.106-13" date="1513857600">- Handle bogus --confFile and --logfile arguments
- Produce more informative vdo manager high-level help
- Generate command-specific unrecognized argument messages
- Resolves: rhbz#1520927
- Resolves: rhbz#1522750
- Resolves: rhbz#1525560</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.114-14" date="1515585600">- VDO automatically chooses the proper write policy by default
- Package uninstall removes vdo.service symlinks
- Resolves: rhbz#1525305
- Resolves: rhbz#1531047</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.124-14" date="1516363200">- Added a specific error for less than 1 block growLogical.
- Resolves: rhbz#1532653</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.130-15" date="1517486400">- vdo growLogical by less than 4K gives correct error
- Fix URL to point to GitHub tree
- Resolves: rhbz#1532653
- Resolves: rhbz#1539059</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.144-16" date="1517918400">- Updated summary and description
- Resolves: rhbz#1541409</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.146-16" date="1518004800">- VDO start command now does index memory checking
- Module target is now "vdo" instead of "dedupe"
- VDO remove with no device no longer puts a spurious file in /dev
- ANsible module no longer fails on modification operations
- Resolves: rhbz#1510567
- Resolves: rhbz#1530358
- Resolves: rhbz#1535597
- Resolves: rhbz#1536214</changelog>
  <changelog author="- Joseph Chapman &lt;jochapma@redhat.com&gt; - 6.1.0.149-16" date="1518782400">- Sync mode is safe if underlying storage changes to requiring flushes
- Resolves: rhbz#1540777</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-17" date="1525003200">- Updated source to use GitHub
- Fixed bug where VDO would always be created with a dense index even when
  a sparse index was requested.
- Resolves: rhbz#1572496</changelog>
  <changelog author="- Andy Walsh &lt;awalsh@redhat.com&gt; - 6.1.0.168-18" date="1525003201">- Bumped NVR for z-stream candidate</changelog>
</package>
<package pkgid="fa0dafa48d4e227247caf233c1eb531cd9edaf42a19e9a39bd9de48311fe9954" name="virt-dib" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="ac009dcbe9df9f7f0ed41cc07da5655ddabe866a693ef6e54fe84da700346360" name="virt-p2v-maker" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="8b18e8b5583bbe115aaf6c78d554eadaa04bb7ea9a42b7e31a1db4bf371800f6" name="virt-v2v" arch="x86_64">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="86709864801ce8ceac428781c00907469bc08047dd40c65bef43379f3b62e668" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.21.7" rel="1.el7_5"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20-1" date="1497009600">- 1389729: Add missing xml section for test (fran@caosdigital.com)
- 1389729: virt-who incorrectly reports 'name' instead of 'hostname' for RHEV
  hosts (fran@caosdigital.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)
- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)
- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- DestinationThreads now send all reports (csnyder@redhat.com)
- Adds IntervalThread base class and refactors Virt classes
  (csnyder@redhat.com)
- Remove reference to nonexistant method _set_option (csnyder@redhat.com)
- Update ConfigManager to produce destination and source mappings.
  (csnyder@redhat.com)
- Implemements a threadsafe datastore (csnyder@redhat.com)
- Move from using processes to threads (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)
- 1403640: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- Add releaser for rhel-7.4 (khowell@redhat.com)
- 1391512: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.2-1" date="1499947200">- 1458184: better reading of environment variables (jhnidek@redhat.com)
- 1401867: Enable logging of rhsm module to rhsm.log (jhnidek@redhat.com)
- 1404117: Check parameter consistency and refactoring (jhnidek@redhat.com)
- Adds a patch number to virt-who versioning (csnyder@redhat.com)
- 1401420: xen supports only uuid/hostname as hypervisor_id
  (jhnidek@redhat.com)
- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)
- 1452436: virt-who prints host-to-quest mapping everytime (jhnidek@redhat.com)
- 1357761: Do not check passwords to be in latin1 encoding (jhnidek@redhat.com)
- 1457101: Continue running despite malformed configs (csnyder@redhat.com)
- 1409984: Retry initial report retrieval on connection timeout
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.4-1" date="1501070400">- Point Source0 to GitHub (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.0-1" date="1509364800">- Update hypervisorCheckInAsync test for new config sections
  (csnyder@redhat.com)
- Update Config Refactor with changes from master (csnyder@redhat.com)
- Removed usage of old Config (not unit tests) (jhnidek@redhat.com)
- Further clean up of unit tests (jhnidek@redhat.com)
- Create Xen Config Subclass (jhnidek@redhat.com)
- Create Rhevm Config Subclass (jhnidek@redhat.com)
- Create VDSM config subclass (wpoteat@redhat.com)
- Clean up ConfigSection Unit tests (jhnidek@redhat.com)
- Adds FakeVirtConfigSection (csnyder@redhat.com)
- Configuration subclass for hyperv (wpoteat@redhat.com)
- Implement EsxConfigSection (khowell@redhat.com)
- Libvirtd ConfigSection Subclass (jhnidek@redhat.com)
- Adds EffectiveConfig, ConfigSection (csnyder@redhat.com)
- Adds warning message for deprecated env vars (csnyder@redhat.com)
- 1503700: Updates to the job polling frequency (csnyder@redhat.com)
- 1502821: Remove undocumented, broken env var "VIRTWHO_DISABLE_ASYNC"
  (csnyder@redhat.com)
- 1466015: Warn of deprecation of command line options in next release
  (wpoteat@redhat.com)
- remove non-existant variable fake_is_hypervisor (adarshvritant@gmail.com)
- 1485865: Do not replace /etc/virt-who.conf on rpm upgrade
  (csnyder@redhat.com)
- Utilize the owner from the first report seen, if we do not know the owner
  (csnyder@redhat.com)
- Updates based on review (use str.format) (csnyder@redhat.com)
- Fix example fake config in man docs (adarshvritant@gmail.com)
- Add m2crypto dependency (adarshvritant@gmail.com)
- 1211435: Don't send host-to-geust mapping, when env, owner are wrong
  (jhnidek@redhat.com)
- 1408556: Log which owner updated mappings are being sent to
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.21.1-1" date="1511870400">- 1511308: Only ESX supports: exclude_host_parents and filter_host_parents.
  (jhnidek@redhat.com)
- 1509596: Use qemu+ssh transport if not provided (libvirt)
  (csnyder@redhat.com)
- 1511308: Xen and Hyper-V do not support some filter options
  (jhnidek@redhat.com)
- 1510760: Ensure virt-who exits properly (w/ no good conf)
  (csnyder@redhat.com)
- 1509606: Remove duplicate output of validation messages (csnyder@redhat.com)
- 1509597: Fix issue with cli consistancy check for vdsm (csnyder@redhat.com)
- 1509595: Only expect owner on HostGuestAssociationReports
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.2-1" date="1512648000">- 1510310: Ensure that owner and env are required where necessary
  (csnyder@redhat.com)
- 1512778: ESX should require username, password, and server values
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.3-1" date="1515412800">- 1523548: Options log_dir and log_file are not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.4-1" date="1517313600">- 1353119: Add JSON-RPC support for VDSM (khowell@redhat.com)
- 1509597: Enable to use virt-who with VDSM again (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.5-1" date="1517918400">- 1492074: Enable login to ESX using password with UTF-8 string
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.21.7-1" date="1524657600">- 1569299: try/exception needed for hypervisor_id check (wpoteat@redhat.com)</changelog>
</package>
<package pkgid="1e3a81bcde6b742de42def3c09cc77b2a73a0df308a4f9b4fd1b569a8c7f40cb" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.21.7" rel="1.el7_5"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20-1" date="1497009600">- 1389729: Add missing xml section for test (fran@caosdigital.com)
- 1389729: virt-who incorrectly reports 'name' instead of 'hostname' for RHEV
  hosts (fran@caosdigital.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)
- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)
- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- DestinationThreads now send all reports (csnyder@redhat.com)
- Adds IntervalThread base class and refactors Virt classes
  (csnyder@redhat.com)
- Remove reference to nonexistant method _set_option (csnyder@redhat.com)
- Update ConfigManager to produce destination and source mappings.
  (csnyder@redhat.com)
- Implemements a threadsafe datastore (csnyder@redhat.com)
- Move from using processes to threads (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)
- 1403640: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- Add releaser for rhel-7.4 (khowell@redhat.com)
- 1391512: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.2-1" date="1499947200">- 1458184: better reading of environment variables (jhnidek@redhat.com)
- 1401867: Enable logging of rhsm module to rhsm.log (jhnidek@redhat.com)
- 1404117: Check parameter consistency and refactoring (jhnidek@redhat.com)
- Adds a patch number to virt-who versioning (csnyder@redhat.com)
- 1401420: xen supports only uuid/hostname as hypervisor_id
  (jhnidek@redhat.com)
- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)
- 1452436: virt-who prints host-to-quest mapping everytime (jhnidek@redhat.com)
- 1357761: Do not check passwords to be in latin1 encoding (jhnidek@redhat.com)
- 1457101: Continue running despite malformed configs (csnyder@redhat.com)
- 1409984: Retry initial report retrieval on connection timeout
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.4-1" date="1501070400">- Point Source0 to GitHub (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.0-1" date="1509364800">- Update hypervisorCheckInAsync test for new config sections
  (csnyder@redhat.com)
- Update Config Refactor with changes from master (csnyder@redhat.com)
- Removed usage of old Config (not unit tests) (jhnidek@redhat.com)
- Further clean up of unit tests (jhnidek@redhat.com)
- Create Xen Config Subclass (jhnidek@redhat.com)
- Create Rhevm Config Subclass (jhnidek@redhat.com)
- Create VDSM config subclass (wpoteat@redhat.com)
- Clean up ConfigSection Unit tests (jhnidek@redhat.com)
- Adds FakeVirtConfigSection (csnyder@redhat.com)
- Configuration subclass for hyperv (wpoteat@redhat.com)
- Implement EsxConfigSection (khowell@redhat.com)
- Libvirtd ConfigSection Subclass (jhnidek@redhat.com)
- Adds EffectiveConfig, ConfigSection (csnyder@redhat.com)
- Adds warning message for deprecated env vars (csnyder@redhat.com)
- 1503700: Updates to the job polling frequency (csnyder@redhat.com)
- 1502821: Remove undocumented, broken env var "VIRTWHO_DISABLE_ASYNC"
  (csnyder@redhat.com)
- 1466015: Warn of deprecation of command line options in next release
  (wpoteat@redhat.com)
- remove non-existant variable fake_is_hypervisor (adarshvritant@gmail.com)
- 1485865: Do not replace /etc/virt-who.conf on rpm upgrade
  (csnyder@redhat.com)
- Utilize the owner from the first report seen, if we do not know the owner
  (csnyder@redhat.com)
- Updates based on review (use str.format) (csnyder@redhat.com)
- Fix example fake config in man docs (adarshvritant@gmail.com)
- Add m2crypto dependency (adarshvritant@gmail.com)
- 1211435: Don't send host-to-geust mapping, when env, owner are wrong
  (jhnidek@redhat.com)
- 1408556: Log which owner updated mappings are being sent to
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.21.1-1" date="1511870400">- 1511308: Only ESX supports: exclude_host_parents and filter_host_parents.
  (jhnidek@redhat.com)
- 1509596: Use qemu+ssh transport if not provided (libvirt)
  (csnyder@redhat.com)
- 1511308: Xen and Hyper-V do not support some filter options
  (jhnidek@redhat.com)
- 1510760: Ensure virt-who exits properly (w/ no good conf)
  (csnyder@redhat.com)
- 1509606: Remove duplicate output of validation messages (csnyder@redhat.com)
- 1509597: Fix issue with cli consistancy check for vdsm (csnyder@redhat.com)
- 1509595: Only expect owner on HostGuestAssociationReports
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.2-1" date="1512648000">- 1510310: Ensure that owner and env are required where necessary
  (csnyder@redhat.com)
- 1512778: ESX should require username, password, and server values
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.3-1" date="1515412800">- 1523548: Options log_dir and log_file are not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.4-1" date="1517313600">- 1353119: Add JSON-RPC support for VDSM (khowell@redhat.com)
- 1509597: Enable to use virt-who with VDSM again (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.5-1" date="1517918400">- 1492074: Enable login to ESX using password with UTF-8 string
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.21.7-1" date="1524657600">- 1569299: try/exception needed for hypervisor_id check (wpoteat@redhat.com)</changelog>
</package>
<package pkgid="91942f7abc32cea76924d4a5a30489c850e4e8a5acf48df6005365768d8bba08" name="virt-who" arch="src">
  <version epoch="0" ver="0.21.7" rel="1.el7_5"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20-1" date="1497009600">- 1389729: Add missing xml section for test (fran@caosdigital.com)
- 1389729: virt-who incorrectly reports 'name' instead of 'hostname' for RHEV
  hosts (fran@caosdigital.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)
- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)
- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- DestinationThreads now send all reports (csnyder@redhat.com)
- Adds IntervalThread base class and refactors Virt classes
  (csnyder@redhat.com)
- Remove reference to nonexistant method _set_option (csnyder@redhat.com)
- Update ConfigManager to produce destination and source mappings.
  (csnyder@redhat.com)
- Implemements a threadsafe datastore (csnyder@redhat.com)
- Move from using processes to threads (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)
- 1403640: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- Add releaser for rhel-7.4 (khowell@redhat.com)
- 1391512: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.2-1" date="1499947200">- 1458184: better reading of environment variables (jhnidek@redhat.com)
- 1401867: Enable logging of rhsm module to rhsm.log (jhnidek@redhat.com)
- 1404117: Check parameter consistency and refactoring (jhnidek@redhat.com)
- Adds a patch number to virt-who versioning (csnyder@redhat.com)
- 1401420: xen supports only uuid/hostname as hypervisor_id
  (jhnidek@redhat.com)
- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)
- 1452436: virt-who prints host-to-quest mapping everytime (jhnidek@redhat.com)
- 1357761: Do not check passwords to be in latin1 encoding (jhnidek@redhat.com)
- 1457101: Continue running despite malformed configs (csnyder@redhat.com)
- 1409984: Retry initial report retrieval on connection timeout
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.4-1" date="1501070400">- Point Source0 to GitHub (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.0-1" date="1509364800">- Update hypervisorCheckInAsync test for new config sections
  (csnyder@redhat.com)
- Update Config Refactor with changes from master (csnyder@redhat.com)
- Removed usage of old Config (not unit tests) (jhnidek@redhat.com)
- Further clean up of unit tests (jhnidek@redhat.com)
- Create Xen Config Subclass (jhnidek@redhat.com)
- Create Rhevm Config Subclass (jhnidek@redhat.com)
- Create VDSM config subclass (wpoteat@redhat.com)
- Clean up ConfigSection Unit tests (jhnidek@redhat.com)
- Adds FakeVirtConfigSection (csnyder@redhat.com)
- Configuration subclass for hyperv (wpoteat@redhat.com)
- Implement EsxConfigSection (khowell@redhat.com)
- Libvirtd ConfigSection Subclass (jhnidek@redhat.com)
- Adds EffectiveConfig, ConfigSection (csnyder@redhat.com)
- Adds warning message for deprecated env vars (csnyder@redhat.com)
- 1503700: Updates to the job polling frequency (csnyder@redhat.com)
- 1502821: Remove undocumented, broken env var "VIRTWHO_DISABLE_ASYNC"
  (csnyder@redhat.com)
- 1466015: Warn of deprecation of command line options in next release
  (wpoteat@redhat.com)
- remove non-existant variable fake_is_hypervisor (adarshvritant@gmail.com)
- 1485865: Do not replace /etc/virt-who.conf on rpm upgrade
  (csnyder@redhat.com)
- Utilize the owner from the first report seen, if we do not know the owner
  (csnyder@redhat.com)
- Updates based on review (use str.format) (csnyder@redhat.com)
- Fix example fake config in man docs (adarshvritant@gmail.com)
- Add m2crypto dependency (adarshvritant@gmail.com)
- 1211435: Don't send host-to-geust mapping, when env, owner are wrong
  (jhnidek@redhat.com)
- 1408556: Log which owner updated mappings are being sent to
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.21.1-1" date="1511870400">- 1511308: Only ESX supports: exclude_host_parents and filter_host_parents.
  (jhnidek@redhat.com)
- 1509596: Use qemu+ssh transport if not provided (libvirt)
  (csnyder@redhat.com)
- 1511308: Xen and Hyper-V do not support some filter options
  (jhnidek@redhat.com)
- 1510760: Ensure virt-who exits properly (w/ no good conf)
  (csnyder@redhat.com)
- 1509606: Remove duplicate output of validation messages (csnyder@redhat.com)
- 1509597: Fix issue with cli consistancy check for vdsm (csnyder@redhat.com)
- 1509595: Only expect owner on HostGuestAssociationReports
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.2-1" date="1512648000">- 1510310: Ensure that owner and env are required where necessary
  (csnyder@redhat.com)
- 1512778: ESX should require username, password, and server values
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.3-1" date="1515412800">- 1523548: Options log_dir and log_file are not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.4-1" date="1517313600">- 1353119: Add JSON-RPC support for VDSM (khowell@redhat.com)
- 1509597: Enable to use virt-who with VDSM again (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.5-1" date="1517918400">- 1492074: Enable login to ESX using password with UTF-8 string
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.21.7-1" date="1524657600">- 1569299: try/exception needed for hypervisor_id check (wpoteat@redhat.com)</changelog>
</package>
<package pkgid="dc3e09ed16281807e80537e5df264f6872d7002b4c6bdb160712806d080ad494" name="virt-who" arch="src">
  <version epoch="0" ver="0.21.7" rel="1.el7_5"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20-1" date="1497009600">- 1389729: Add missing xml section for test (fran@caosdigital.com)
- 1389729: virt-who incorrectly reports 'name' instead of 'hostname' for RHEV
  hosts (fran@caosdigital.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)
- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)
- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- DestinationThreads now send all reports (csnyder@redhat.com)
- Adds IntervalThread base class and refactors Virt classes
  (csnyder@redhat.com)
- Remove reference to nonexistant method _set_option (csnyder@redhat.com)
- Update ConfigManager to produce destination and source mappings.
  (csnyder@redhat.com)
- Implemements a threadsafe datastore (csnyder@redhat.com)
- Move from using processes to threads (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)
- 1403640: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- Add releaser for rhel-7.4 (khowell@redhat.com)
- 1391512: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.2-1" date="1499947200">- 1458184: better reading of environment variables (jhnidek@redhat.com)
- 1401867: Enable logging of rhsm module to rhsm.log (jhnidek@redhat.com)
- 1404117: Check parameter consistency and refactoring (jhnidek@redhat.com)
- Adds a patch number to virt-who versioning (csnyder@redhat.com)
- 1401420: xen supports only uuid/hostname as hypervisor_id
  (jhnidek@redhat.com)
- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)
- 1452436: virt-who prints host-to-quest mapping everytime (jhnidek@redhat.com)
- 1357761: Do not check passwords to be in latin1 encoding (jhnidek@redhat.com)
- 1457101: Continue running despite malformed configs (csnyder@redhat.com)
- 1409984: Retry initial report retrieval on connection timeout
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.4-1" date="1501070400">- Point Source0 to GitHub (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.0-1" date="1509364800">- Update hypervisorCheckInAsync test for new config sections
  (csnyder@redhat.com)
- Update Config Refactor with changes from master (csnyder@redhat.com)
- Removed usage of old Config (not unit tests) (jhnidek@redhat.com)
- Further clean up of unit tests (jhnidek@redhat.com)
- Create Xen Config Subclass (jhnidek@redhat.com)
- Create Rhevm Config Subclass (jhnidek@redhat.com)
- Create VDSM config subclass (wpoteat@redhat.com)
- Clean up ConfigSection Unit tests (jhnidek@redhat.com)
- Adds FakeVirtConfigSection (csnyder@redhat.com)
- Configuration subclass for hyperv (wpoteat@redhat.com)
- Implement EsxConfigSection (khowell@redhat.com)
- Libvirtd ConfigSection Subclass (jhnidek@redhat.com)
- Adds EffectiveConfig, ConfigSection (csnyder@redhat.com)
- Adds warning message for deprecated env vars (csnyder@redhat.com)
- 1503700: Updates to the job polling frequency (csnyder@redhat.com)
- 1502821: Remove undocumented, broken env var "VIRTWHO_DISABLE_ASYNC"
  (csnyder@redhat.com)
- 1466015: Warn of deprecation of command line options in next release
  (wpoteat@redhat.com)
- remove non-existant variable fake_is_hypervisor (adarshvritant@gmail.com)
- 1485865: Do not replace /etc/virt-who.conf on rpm upgrade
  (csnyder@redhat.com)
- Utilize the owner from the first report seen, if we do not know the owner
  (csnyder@redhat.com)
- Updates based on review (use str.format) (csnyder@redhat.com)
- Fix example fake config in man docs (adarshvritant@gmail.com)
- Add m2crypto dependency (adarshvritant@gmail.com)
- 1211435: Don't send host-to-geust mapping, when env, owner are wrong
  (jhnidek@redhat.com)
- 1408556: Log which owner updated mappings are being sent to
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.21.1-1" date="1511870400">- 1511308: Only ESX supports: exclude_host_parents and filter_host_parents.
  (jhnidek@redhat.com)
- 1509596: Use qemu+ssh transport if not provided (libvirt)
  (csnyder@redhat.com)
- 1511308: Xen and Hyper-V do not support some filter options
  (jhnidek@redhat.com)
- 1510760: Ensure virt-who exits properly (w/ no good conf)
  (csnyder@redhat.com)
- 1509606: Remove duplicate output of validation messages (csnyder@redhat.com)
- 1509597: Fix issue with cli consistancy check for vdsm (csnyder@redhat.com)
- 1509595: Only expect owner on HostGuestAssociationReports
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.2-1" date="1512648000">- 1510310: Ensure that owner and env are required where necessary
  (csnyder@redhat.com)
- 1512778: ESX should require username, password, and server values
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.3-1" date="1515412800">- 1523548: Options log_dir and log_file are not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.4-1" date="1517313600">- 1353119: Add JSON-RPC support for VDSM (khowell@redhat.com)
- 1509597: Enable to use virt-who with VDSM again (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.5-1" date="1517918400">- 1492074: Enable login to ESX using password with UTF-8 string
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.21.7-1" date="1524657600">- 1569299: try/exception needed for hypervisor_id check (wpoteat@redhat.com)</changelog>
</package>
<package pkgid="0f60aee83e5603657b56e5bbc968648d0848e9d78d4f46d6f6dbc82b0f840019" name="xmlrpc" arch="src">
  <version epoch="1" ver="3.1.3" rel="9.el7_5"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1.3-1" date="1347624000">- First release of version 3.x package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;&#9;3.1.3-2" date="1350734400">- xmlrpc v2 had an Epoch so we need one here. Add it back</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1:3.1.3-3" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1.3-4" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:3.1.3-5" date="1368792000">- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.3-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 1:3.1.3-7" date="1376913600">- Migrate away from mvn-rpmbuild (#997460)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:3.1.3-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 1:3.1.3-9" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
</package>
<package pkgid="fdc26cea6a45aed3ffc3bff36d45f6da5f5c70224a9cc5b1c829f8f2bc18d9d4" name="xmlrpc-client" arch="noarch">
  <version epoch="1" ver="3.1.3" rel="9.el7_5"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1.3-1" date="1347624000">- First release of version 3.x package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;&#9;3.1.3-2" date="1350734400">- xmlrpc v2 had an Epoch so we need one here. Add it back</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1:3.1.3-3" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1.3-4" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:3.1.3-5" date="1368792000">- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.3-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 1:3.1.3-7" date="1376913600">- Migrate away from mvn-rpmbuild (#997460)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:3.1.3-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 1:3.1.3-9" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
</package>
<package pkgid="6bb2e8db2605c4eeaf89d71421e0d82286d1e812f8036acf8729561ff0500b76" name="xmlrpc-common" arch="noarch">
  <version epoch="1" ver="3.1.3" rel="9.el7_5"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1.3-1" date="1347624000">- First release of version 3.x package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;&#9;3.1.3-2" date="1350734400">- xmlrpc v2 had an Epoch so we need one here. Add it back</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1:3.1.3-3" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1.3-4" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:3.1.3-5" date="1368792000">- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.3-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 1:3.1.3-7" date="1376913600">- Migrate away from mvn-rpmbuild (#997460)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:3.1.3-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 1:3.1.3-9" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
</package>
<package pkgid="f65f1061927e7a5b0fbcccb137b517d3d71ba31be8c952b018ada9c4ad5a1032" name="xmlrpc-javadoc" arch="noarch">
  <version epoch="1" ver="3.1.3" rel="9.el7_5"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1.3-1" date="1347624000">- First release of version 3.x package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;&#9;3.1.3-2" date="1350734400">- xmlrpc v2 had an Epoch so we need one here. Add it back</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1:3.1.3-3" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1.3-4" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:3.1.3-5" date="1368792000">- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.3-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 1:3.1.3-7" date="1376913600">- Migrate away from mvn-rpmbuild (#997460)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:3.1.3-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 1:3.1.3-9" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
</package>
<package pkgid="aabce8625a563494e6f962bcd3a9c152a75d3bbd0c5f48d77b13cc631144a7c9" name="xmlrpc-server" arch="noarch">
  <version epoch="1" ver="3.1.3" rel="9.el7_5"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1.3-1" date="1347624000">- First release of version 3.x package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;&#9;3.1.3-2" date="1350734400">- xmlrpc v2 had an Epoch so we need one here. Add it back</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1:3.1.3-3" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1.3-4" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:3.1.3-5" date="1368792000">- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.3-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 1:3.1.3-7" date="1376913600">- Migrate away from mvn-rpmbuild (#997460)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:3.1.3-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 1:3.1.3-9" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
</package>
<package pkgid="e238c3fe7aeed16fa1fb852fca27f6d5ccb7bc8fcf125481c0493ae93fb30504" name="xorg-x11-drv-wacom" arch="i686">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="ed16e6e378e97ecb1f3b30245fd91f8eeca8312753184d10428529d7f11fc739" name="xorg-x11-drv-wacom" arch="src">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="ca0b3850cf39ddd81cf912f52fa1db3de3a2a1ffabd005eed2a716fc5768931b" name="xorg-x11-drv-wacom" arch="src">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="ec2421b996ef724a860e92713a76543d5b9f0aa0b95aba44cfd77792c6e4b21b" name="xorg-x11-drv-wacom" arch="x86_64">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="48fcc27f6d9a77c88222e6b1012fc664035bbe0f4b8ee6e51e4598c13186e878" name="xorg-x11-drv-wacom-debuginfo" arch="i686">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="149bedf319ddaca36b9c4f814abbd09fe081a19a74dacca0d58a57e6ef0eee56" name="xorg-x11-drv-wacom-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="3ad90c7a1c06a114f73acc2c37806427a801ea2b60ad4a8e6923a944927e866e" name="xorg-x11-drv-wacom-devel" arch="i686">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="c52991f8a21740d67c6834b58c5f6cb4fbebc1e8dba07a69105c122a50a00086" name="xorg-x11-drv-wacom-devel" arch="x86_64">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="0a5b51b37eaf9afaa0c4af2eb98b3ce27a9a2b3f2160cd650adee40a1d2ab3a3" name="yum-NetworkManager-dispatcher" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="43322a01a1407e94dfe28703876c750b493fb1ebfb607a6db88213ece2796b83" name="yum-NetworkManager-dispatcher" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="3591c6268e25bb5383cbaa1440291b4a7b431f909c18a9cd1900e4c02b0f6b55" name="yum-plugin-aliases" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="1f52d88edce3b9813003877a8fd13c8845eecc63a2a3b475c141019b2dbf0353" name="yum-plugin-aliases" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="c646add553bc89f25f70536b4f5fd4e480cc1074df6ca830afe1a720ef2425cb" name="yum-plugin-auto-update-debug-info" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="6cdb04c66bcfc601f9c6d0a973bbe5162ab1a0fa57a51cba616ef0276b44ff70" name="yum-plugin-auto-update-debug-info" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="96f66b2fcd5a556d47ca1813a26e7ff7a12aad03d9971c55d9a00ab999a09461" name="yum-plugin-changelog" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="79a7a2ae709c06e6da36e71340482d95508f905789b8b83bb4ff2d9f44758269" name="yum-plugin-changelog" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="318dddaf1479abb62813c30ce0e6247efd71b6387109530e0bfe8b896972e34b" name="yum-plugin-copr" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="720b82938b3aa151f7f3e9b8c2ce5814f4734036cbe3021f1045430ace369024" name="yum-plugin-copr" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="355cd495e0f3aa780725d8ab94a8339616244bddb9cf195f29a971e5172ec8ab" name="yum-plugin-fastestmirror" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="fb914947714b2b7097c2e0ffdbc72d584f1e47e9055f6ef7ff0ccf1863fcfb2c" name="yum-plugin-fastestmirror" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="f9cb07e8066b3554adc53306179694e425723fa2598bbed905d5506de0600700" name="yum-plugin-filter-data" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="2b12a6bb2202904567b30e1db1764f018979f643b902f40e542a18a3de5511af" name="yum-plugin-filter-data" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="78fc0171285e7f8a3baecca6b78eca8be7dedfa2f00631d95900906cbe3cbbdd" name="yum-plugin-fs-snapshot" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="e283330b292a9d28e122bdfa86fa6bfcf6b221e35018e5c046276f2cf1784105" name="yum-plugin-fs-snapshot" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="0cbc98e736228140b2862eb44652fd0c9f0e1145a55ff94f0d68edc58cbcf1c0" name="yum-plugin-keys" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="acaa9e997406b2ebf5fbb0dd4c8b66fe273e0a7d1ddb9b2cb799420622a779a0" name="yum-plugin-keys" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="e2cd6721ff85f70a0d994fd020b063cc5cf3c02be659fa176b6f3a67a48b518d" name="yum-plugin-list-data" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="cfbe6007a6333fdba5069ab710ed1f6a49a17cba57e60843a99ca3ae45271bfc" name="yum-plugin-list-data" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="788e3632a58d4ac582b046ab90fb9373497a0c32ae8c349a01a6c9863238135d" name="yum-plugin-local" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="375af8982b304d6a3d6e59390f34f050d02c22e64b0e53f306ffb5e82e29379d" name="yum-plugin-local" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="0554974fc7a0fe028023437a7785ffb3e775aa8e77d78d8340abbb38764ea062" name="yum-plugin-merge-conf" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="31368a02703926db6e193d0f99fc0a4f43cfd328fcb7d7ad9ecbe3c0a8ed9082" name="yum-plugin-merge-conf" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="466ec95aab213704aecf416be21c8500770e3f6b99697635cb82a2658c378232" name="yum-plugin-ovl" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="19cb75abfed330bda60d04e4670cc40b2d96f485c51d618a71d7eb1f731dc592" name="yum-plugin-ovl" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="8dc71142bcf48de67578ddb61741ec7ba90a2863464e611377d95b1d0139a6d8" name="yum-plugin-post-transaction-actions" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="e52e4e8273a3e5cbaabe7930878fd54a2968625f8f40706869583e6443735573" name="yum-plugin-post-transaction-actions" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="c2be7392652c4d9c8a38f1b46712d2e1e615baa5654e42960136d76dade63109" name="yum-plugin-pre-transaction-actions" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="5d4eb332616e9016e76336c628884ff507a3cb926be91bbf200d316283717729" name="yum-plugin-pre-transaction-actions" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="52999d38cb2a77d990f50e0880c57faedc5ad534901cb41ea94cde7a20d29e05" name="yum-plugin-priorities" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="edc08d7f0c83b54cbb7dcd349409f8a763310daecd4b66f38d02874dda3a177c" name="yum-plugin-priorities" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="4873c15abee872c39d5fea3a5855bbeec7abfbcb88e3464d28988cc4626d7cee" name="yum-plugin-protectbase" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="82be2d66c2eab3c92276c3eeb865b26dfe19286c703a1a8051cada496b62ea89" name="yum-plugin-protectbase" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="8d592777eaed2e5822d71d5e8056545d0c0201e4b91f571f956949b3286da40d" name="yum-plugin-ps" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="032ae7054b1c88f42e8aa909975bf2f0f762272d5e012a7d4be47ef0a96d3cf2" name="yum-plugin-ps" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="3fba4647be21d1b1bbdb2d106e225135315e18b9d4b28c49e9df0ce19c9906eb" name="yum-plugin-remove-with-leaves" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="1b87d1183bef763b9143207a24eee1b1e2bc731eea747f2455895c6909c939df" name="yum-plugin-remove-with-leaves" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="00b7b519568c4eb4b5c0a3952819f088c9464b8c5831516c11ec563c292ff48e" name="yum-plugin-rpm-warm-cache" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="2c9934990c632b4de8aa9d0cfef2ad7c7845543819d7638d46f905e366722cb5" name="yum-plugin-rpm-warm-cache" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="e54f695f1dfdf1c3fc4feef6c99e45131942a3759c04dc1106f15b9c444774d0" name="yum-plugin-show-leaves" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="a61e28d0e65dc576e2df0848aaea3afb9f7a7caaac2646b0c5aff45a52931263" name="yum-plugin-show-leaves" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="4a4481a896642d9f44ade4d095d6163532d4b205d9dd2a36bdb8d288f755bba4" name="yum-plugin-tmprepo" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="0895a922f7d2b647a40510a80a61520700490bb85e942a61dbbd21044c3b2a0a" name="yum-plugin-tmprepo" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="f820b6d86f371916eae424d8d1f99db569b9a8d54e26c57133beee563af675b6" name="yum-plugin-tsflags" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="129f05b172c7f184568f6d5de76fec9477365a5209d17b59aafe0f1b8c70926c" name="yum-plugin-tsflags" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="555659b5876ad63299580f9b484e5024a8a93bd83ded693f6bd7515babb69fee" name="yum-plugin-upgrade-helper" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="bd0dd0ad217ffcdbe966d6f8618eae474ced46e4b6df49437eac6af2830d61e9" name="yum-plugin-upgrade-helper" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="b7a83aae00fe8e46d422078cb13b15f90c2cc20c5e7c77e62af1087e9a145f8d" name="yum-plugin-verify" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="b7385dc799b078470f66fcb23028faae1fcce0c5d6d5ab3708e59d67764f81ac" name="yum-plugin-verify" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="53b98e7cad773739b6e7c96dc74b1363e865cd4cb0f4a0f42aee2ca412a9920b" name="yum-plugin-versionlock" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="71b0d8845acc4dc8af2dc95dc0bfc8c2a9c33d8f281f9d1887ff19650281cb8f" name="yum-plugin-versionlock" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="f12e111178ed09777ac043dec9fd94924512c129893496bda7c15b2ccb5592b1" name="yum-updateonboot" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="d1d3719475692f037b505abebb887a2bca08be3b7b5ccb8d07f0541992e026c8" name="yum-updateonboot" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="60457732053966346b03be5fd7da569f0f16f033ce99273f8b7d1cdaad0d1908" name="yum-utils" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="86031e7c77682f5bb89c6d599e092ca7a4857418a1ea9481973e9822d6f62bc0" name="yum-utils" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="6320590d6e41d3b059df635f923821ac41c0a4ac721ceefcc63ee97bbbd773ed" name="yum-utils" arch="src">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="1400c407b3e33e9bdc5920f5be8800a6d5e5ffdaf3b8f2cad85c0488da294e7e" name="yum-utils" arch="src">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
</otherdata>